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Abstract 

Abstract computable functions are defined by abstract finite deterministic algorithms on many- 
sorted algebras. We show that there exist finite universal algebraic specifications that specify 
uniquely (up to isomorphism) (i) all absract computable functions on any many-sorted algebra; 
and (ii) all functions effectively approximable by abstract computable functions on any metric 
algebra. We show that there exist universal algebraic specifications for all the classically com- 
putable functions on the set M of real numbers. The algebraic specifications used are mainly 
bounded universal equations and conditional equations. We investigate the initial algebra seman- 
tics of these specifications, and derive situations where algebraic specifications define precisely the 
computable functions. 
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Introduction 

Abstract computability theory is the theory of computable functions and relations over 
many-sorted algebras. It is a generalisation of classical recursion theory on the natural 
numbers, based on notions of finite deterministic computation on an arbitrary many- 
sorted algebra. An important feature of the theory is its analysis of computations that are 
uniform over classes of algebras, and a natural application of the theory is to analyse the 
scope and limits of models of computation and specification over abstract data types and 
their implementations. Since the 1960s, many abstract models of computation have been 
defined and classified, starting with the models of E. Engeler, Y. Moschovakis, H. Fried- 
man and J.C. Shepherdson, and generalised Church- Turing Theses for computation and 
specification have been formulated and defended [TZ88, TZ92]. Here we will use the model 
of computation //PR* (a generalised form of Kleene schemes), which involves simultane- 
ous primitive recursion and least number search over a many-sorted algebra augmented 
by the booleans, natural numbers and finite sequences of every sort. In [TZ88] the model 
//PR* is shown to be equivalent to ' while'-array programs over these algebras, the primary 
mathematical model of imperative programming. 

Working with finite computation on any algebra enables us to develop a number of spe- 
cial computability theories for algebras, such as rings and fields of real numbers [Tuc80, 
Eng93, BSS89, BCSS96, BCSS97] and topological and metric algebras [TZ99]. For a com- 
prehensive introduction to abstract computability, including a survey of its origins in the 
1950s and principal literature, see our survey [TZOO]. 

In this paper we prove theorems that show that functions that are abstractly computable 
over many-sorted algebras, or have abstractly computable approximations on topological 
algebras, can be specified by purely algebraic methods, but that the converse does not hold 
in the absence of certain topological conditions. 

Algebraic specification methods characterise functions as the solutions of systems of 
algebraic formulae; normally, the solutions are unique. By algebraic formulae, we mean 
equations 

t(x) = t'ix) 

or conditional equations 

ti{x) = t[{x) A ... A tfe(x) = 4(x) t(x) = t\x), (*) 

or, more generally, conditional formulae 

RiA...ARk — > R {**) 

where the formulae Ri and R are generalisations of equations, making use of the distin- 
guished sorts nat of naturals and real of reals (as we will see below). To define a unique 
solution for a system of equations, in logic one often thinks of definability up to isomor- 
phism, and in computing one often thinks in terms of initial algebra semantics (or possibly 
final algebra semantics) . However, notice that there are many more equational methods, 
e.g., for specifying concurrent processes using metric space methods to solve equations 
[dBR92, dBdV99], or for computing solutions of differential or integral equations. 
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In computation over a many-sorted algebra A we use the booleans, natural numbers 
and finite sequences over A. With regard to algebraic specifications over such structures, 
generalising conditional equations leads to the concept of conditional bounded universal 
(BU) equations, in which the formulae Ri and R of (**) may have the form 

ti = t2 or Vz <t[ti = t2] 

where the variable z and term t are of sort nat. 

Conditional BU equations are new and provide us with more appropriate axiomatisa- 
tions for some properties using the natural number sort; we show they are equivalent with 
conditional equations. The main theorems are first proved for conditional BU equations 
and the reduction method applied to obtain conditional equational specifications. 

In the first part of the paper, we begin with the "simple" situation where there is a 
system E of conditional equations over a signature S, and a Z'-algebra A such that E 
has one and only one solution f on A. We call this method of characterising functions 
conditional equation definability on A. We address the obvious general question: 

Does abstract coniput ability imply conditional equation definability? 

The answer is yes, and we show that there exist universal specifications that specify all 
computable functions, as follows (Section 5, Theorem 4). 

Theorem A (Algebra). Given a signature U and function type r over U, there exists a 
finite set of conditional equations E{z) (witli a distinguislied natural number variable z) 
over a finite expansion E' of E, such, that for any abstract program a over E, if A is any 
E-algebra and f a total function on A of type r computed by a, then f is defined uniquely 
on A by E{k), where k is a numeral instantiating z which is effectively calculable from 
a. The system E{z) is uniformly computable from E and r. 

Applying our abstract computability theory to metric algebras, we can obtain an im- 
portant, strictly broader, class of functions: namely, those uniformly approximable by ab- 
stractly computable functions. In metric algebras, approximation is elegantly formulated 
in terms of the distance function, which uses the sort real. This gives rise to a broader 
class of conditional formulae than (*), called conditional equations and inequalities, namely 
formulae (**) in which the formulae Ri and R may have the form 

ti = t2 or ti < t2 

where, in the case of inequality {ti < ^2), ti and t2 are of sort real. 
From Theorem A we then prove (Section 6, Theorem 2): 

Theorem B (Metric algebra) . Given a signature E and function type r over E, there 
exists a finite set of conditional equations and inequalities E{z) (with a distinguished 
natural number variable z) over a finite expansion E' of E, such that for any abstract 
program a over E, if A is any metric E-algebra and f a total function on A of type t, 
approximable by a in the following sense: for all a & A and all n 

d{f{a), Ial(n,a))<2-, 
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then f is de£ned uniquely on A by E{k), where k is a numeral instantiating z which is 
effectively calculable from a. The system E{z) is uniformly computable from E and r. 

Thus, there is a bound B{IJ, r) on the number of conditional equations and inequalities 
needed to define all computable or computably approximable functions, that depends only 
on the signature E and the function type r. 

Using Theorem B, we show that all the classically computable functions of real analysis 
are unique solutions of finite sets of conditional equations and inequalities. These classically 
computable functions have several characterisations, starting with those of Grzegorczyk 
[Grz55, Grz57] and Lacombe [Lac55], and hence are often called GL- computable. The fa- 
miliar functions of analysis, such as sin a;, e^, logo;, etc., are all GL-computable. Now there 
exists a certain simple total metric algebra X'^ over the real unit interval / = [0, 1], such 
that the total functions on / which are uniformly approximable by abstractly computable 
functions on X'^ are precisely the GL-computable functions on / [TZ99, TZOO]. We prove 
the following (Section 6, Theorem 3). 

Theorem C (Metric algebra over a real interval). For each positive integer m 
there is a signature which is an expansion of the signature of X*^ by finitely many 
function symbols, and a Gnite system of conditional equations and inequalities E^{7.) 
(with a distinguished natural number variable z) over E^, such that any total function 
f : [0, 1]"^ M that is GL-computable, is the unique solution of E{k) for some substitution 
of a numeral k for z. The specification {E^, Efn{z)) is uniformly computable from m. 

Thus there is a bound B{m) on the number of conditional equations and inequalities 
needed to define all m-ary GL-computable functions on [0, 1] . 

The signature E"^ consists of the sorts of booleans B and naturals N, with their standard 
operations; the sort of reals M, with its ring operations, together with division of reals by 
naturals; the sort of the unit interval /, with its embedding into M; the sort of finite 
arrays on R with their standard operations; the standard metrics on all these sorts; a 
"universal function" which approximably abstractly computes all m-ary GL-computable 
total functions on /, together with the auxiliary functions used in its computation; the 
function used for expressing approximations; and a function for computing bounded 
quantification over N. 

This theorem has some interesting consequences, one of which we illustrate (Section 6, 
Theorem 4): 

Corollary. For each n > 0, there is a finite universal algebraic specification, consisting 
of conditional equations and inequalities, for all computable finite dimensional dynamical 
systems on the unit n-cube and over the unit time interval. 

Next we consider the converse problem: 

Problem. Find (reasonable) conditions under which algebraic definability implies ab- 
stract comput ability. 

From Theorem C it follows that the converse to Theorem A is false, at least for specifi- 
cations consisting of conditional equations and inequalities; for example, for the sine and 
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cosine functions on the unit interval. 

It is an open problem whether the converse of the approximation result (Theorems B 
and C) holds. It seems that some extra topological condition such as continuity is required 
for a converse result. This suggests an interesting research area; see the example and 
discussion in Section 6.3. 

In the second part of the paper, we show how the conditional equational theories, 
and conditional BU equational theories, can be used with standard algebraic specification 
methods associated with proof systems, term rewriting and initial algebra semantics. 

Now, when using the booleans, natural numbers and finite sequences, the algebraic 
specifications and their initial algebra semantics must define the corresponding standard 
models of the booleans, natural numbers and finite arrays. We develop extensions of the 
Birkhoff-Mal'cev Completeness Theorems that underlie the algebraic specification meth- 
ods, designed to ensure that these sorts have standard models. Then we prove (Section 8, 
Theorems 4 and 5): 

Theorem D (Initial algebra). Given a signature U and function type r over U, there 
exists a finite set of conditional equations E{z) (with a distinguished natural number 
variable z ) over a finite expansion S' of E, such that for any abstract program a over S, if 
a computes a total function f on A of type r, and A has an initial algebra specification by 
a set E of either conditional equations or conditional BU equations (with hidden sorts and 
functions), then (A, /) has an initial algebra specification by a set EU E{k), where E{z) 
consists of conditional equations and k is a numeral instantiating z which is effectively 
calculable from a. The system E{z) is uniformly computable from U and t . Furthermore, 
if the specification E of A has e axioms, then the specification of { A, /) is finite, with e + e' 
axioms, where e' is a constant computed uniformly from E and r. 

This paper is part of our series on abstract computability theory on many-sorted algebras 
and its applications, starting in [TZ88] and most recently surveyed in [TZOO]. Knowledge 
of computation and our studies of computation versus specifications [TZ92, TZ91] and 
verification [TZ93] will be helpful, but only our work on topological data types [TZ99] is 
necessary. 

The subject of this paper is also a generalisation of the theory of algebraic specifica- 
tions for computable, semicomputable and co-semicomputable algebras developed by one 
of us (JVT) with J.A. Bergstra: see [BT80b, BT80a, BT82, BT83, BT87, BT95] and the 
surveys [MG85, SHT95]. However, at least initially, the generalised computability raises 
new questions concerning topological data types, uniformity and parameterisation, and 
standard models. Knowledge of the theory for computable algebras is not required for this 
paper. 

In Section 1 we define how to augment structures with the standard sorts of the booleans 
and naturals, and finite sequences or arrays over all sorts, together with the corresponding 
operations. For the rest of the paper we consider, without loss of generality, only N- 
standard signatures and structures with the booleans and naturals. 

In Section 2 we introduce a number of proof systems, all based in the calculus of se- 
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quents over a many-sorted signature E. These are systems for {%) first order fogic over E 
with equahty, {ii) conditional equational fogic, [Hi) conditional bounded universal (BU) 
equational logic, and [iv) conditional standard universal (SU) equational logic. The sys- 
tems {ii) and {iii) are subsystems of the classical predicate calculus (i), and are used in 
the following sections, while {iv) is an infinitary system introduced for interest. 

In Section 3 we define the basic technical notion of a theory uniquely specifying a 
function on an arbitrary algebra with hidden sorts and functions. This leads to a simple 
notion of specifiable parameterisation which we illustrate by showing how a conditional 
equational (or conditional BU equational) specification of a standard structure A can be 
extended to a similar specification of the array structure A* . We also show how to "reduce" 
a conditional BU equational specification over i7 to a conditional equational specification 
over an expansion of E. 

In Section 4 we recall the basic notions of computability of functions, including univer- 
sality of the //PR* functions. 

In Section 5 we prove Theorem A above, concerning the conditional equational defin- 
ability of computable functions. 

In Section 6 we prove Theorems B and C, concerning the definability, by conditional 
equations and inequalities, of computably approximable functions on metric algebras. 

In Section 7 we describe the construction of initial standard models for conditional equa- 
tional and conditional BU equational theories, and work out the completeness theorems 
for the corresponding proof systems in Section 2. The reduction of a conditional BU equa- 
tional specification over E to a conditional equational specification over an expansion of 
E is proved for initial models. 

In Section 8 we investigate the relationship between computability and algebraic specifia- 
bility of functions on initial N-standard algebras, and prove Theorem D. Finally, in Section 
9, we consider the converse problem of finding sufficient conditions for algebraic specifia- 
bility to imply computability on classes of standard structures. Two equivalence theorems 
are proved. 

We wish to thank an anonymous referee for some very helpful comments. 
1 Many-sorted signatures and algebras 

In this section we briefiy review concepts defined and discussed in [TZOO, §1], where more 
detailed information can be found. Background information on universal algebra can be 
found in [MT92, EM85, Wec92]. 

1.1 Basic definitions 

A signature E (for a many-sorted algebra) is a pair consisting of {i) a finite set Sort{E) 
of sorts, and {ii) a finite set Func{E) of (primitive) function symbols, each symbol F 
having a type si x • • • x — > s, where si, . . . , Sm, s e Sort{E); in that case we write 
F : si X ■ ■ ■ X Sm ^ s, with dom{F) =df si x • • • x Sm- (The case m = corresponds 
to constant symbols.) 
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Si X • • • X {m > 0), where si, . . . , 



are 



A E-product type has the form u 
Z'-sorts. We use the notatfon u,v,w,. . . for Z'-product types. 

A E-algehra A has, for each sort s of Z, a non-empty carrier set Ag of sort s, and for 
each Z-function symbol F : u ^ s, a function F-^ : A^ As (where, for the Z-product 
type u = si X ■ ■ ■ X Sm-, we write =df As^ x ■ ■ ■ x As^). 

Given an algebra A, we sometimes write S{A) for its signature. 

The algebra A is total if F^ is total for each Z-function symbol F. Without such a 
totality assumption, A is called partial. 

In this paper we deal with total algebras, except in §8.4. 

We will also consider classes K of Z-algebras. A E-adt (abstract data type) is defined 
to be any such class, closed under Z-isomorphism. In particular, Alg (E) denotes the class 
of all Z-algebras. 



Examples, (a) The algebra of booleans has the carrier 
be displayed as follows: 



{tt, ff} of sort bool. It can 



algebra 


B 


carriers 


B 


functions 


tt,ff: ^B, 




and^,or® : B^ ^ B 




not® : B ^ B 


end 





with signature 



signature 


EiB) 


sorts 


bool 


functions 


true, false : — > bool, 




and, or : booP bool 




not : bool — > bool 


end 





For notational simplicity, we will usually not distinguish between function names in the 
signature (true, etc.) and their intended interpretations (true® = tt, etc.) 

(6) The algebra Mq of naturals has a carrier N of sort nat, together with the zero constant 
and successor function: 



algebra 


Mo 




carriers 


N 




functions 


: - 


M, 




S : N- 


N 


end 







(c) The ring TZq of reals has a carrier R of sort real: 



algebra 


7^o 




carriers 


M 




functions 


0,1: 


R, 




+,x : 
- : M 


R 


end 







We make the following assumption about the signatures E. 
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Instantiation Assumption. For every sort s of E, there is a closed term of that sort, 
called the default term of that sort. 

This guarantees the presence of default values in a Z'-algebra A at aU sorts s, and 
default tuples 5^ at all product types u. 

1.2 Some definitions 

Definition 1 (Subalgebra). Given Z'-algebras A and S, we say that i? is a S-subalgebra 
of A (written B :< A) iff (i) for all Z'-sorts s, Bg C Ag, and (ii) for every Z'-function 
symbol F, = \ B. 

Definition 2 (Expansions and reducts). Let E and E' be signatures with E C E' . 

(a) If A' is a Z'-algebra, then the E-reduct of A', A' \ jj, is the algebra of signature E, 
consisting of the carriers of A' named by the sorts of E and equipped with the functions 
of A' named by the function symbols of E. 

(b) If ^ is a Z-algebra and A' is a Z'-algebra, then A' is a E' -expansion of ^ iff ^ is the 
Z-reduct of A'. 

(c) If K' is a E'-adt, then K' \ x; is the class of Z-reducts of algebras in K' . 

1.3 Adding booleans: Standard signatures and algebras 

Recall the algebra B of booleans (Example (a) in §1.1). 

A signature Z is called standard if (i) E{B) C Z; {ii) the Z-function symbols include 
a conditional 



for all sorts s oi E other than bool; and (Hi) the Z-function symbols include an equality 
operation 



for all s e EqSort{E), where EqSort{E) C Sort{E) is the set of E-equality sorts. 

Given a standard signature E, a Z-algebra A is standard if (z) it is an expansion of B; 
(ii) the conditionals have their standard interpretation in A, i.e., for 6 e B and x,y & Ag, 



and (Hi) the equality operator ec{g is interpreted as identity on each Z-equality sort s. 

Note that any many-sorted signature E can be standardised to a signature E by ad- 
joining the sort bool together with the standard boolean operations; and, correspondingly, 
any algebra A can be standardised to an algebra A^ by adjoining the algebra B and the 



if, : bool X 



s 



eqs : bool 
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conditional ifg at all Z'-sorts s, and the equality operator eq^ at the specified equality 
sorts: 



algebra 






import 


A, B 






ifs : B X ^2 - 


-^As {seSort{U)), 




eq, : ^2 ^ B 


{s e EqSort{E)) 


end 







Thus the standardisation of a Z'-algebra A depends on the specification of EqSort{E). 
These will be the sorts for which an equality test is considered to be "computable" in some 
sense. 

Examples, (a) The simplest standard algebra is the algebra B of the booleans. 

(6) The standard algebra of naturals M is formed by standardising the algebra Mq (Ex- 
ample (6) in §1.1) with nat as an equality sort, and, further, adjoining the order relation 
lessnat as a boolean-valued operation on N: 



algebra 


N 


import 


Mo^B 


functions 


ifnat : B X ^ N, 




eqnat, lesSnat : ^ B 


end 





(c) The standard algebra TZ of reals is formed similarly by standardising the ring TZq 
(Example (c) in §1.1), with real not an equality sort. In fact, neither the equality nor 
the order relation on M is included as an operation on real. (The significance of this is 
discussed later; c/. Remark 3 in §5.3.) 

StdAlg{S) denotes the class of all standard i7-algebras. 

1.4 Adding counters: N-standard signatures and algebras 

A standard signature E is called N-standard if it includes (as well as bool) the numerical 
sort nat, and also function symbols for the standard operations of zero and successor, as 
well as the conditional and equality and order on the naturals: 

0: ^ nat 
S: nat — > nat 
ifnat: bool X nat nat 
eqnat : nat^ bool 
lesSnat: nat^ — > bool. 

The corresponding iT-algebra A is N-standard if the carrier ^nat is the set of natural 
numbers N= {0,1,2, . . . }, and the standard operations (listed above) have their standard 
interpretations on N. 

ACM Transactions on Computational Logic, Vol. TBD, No. TBD, TBD TED. 



10 



Note that any standard signature E can be N- standardised to a signature S by ad- 
joining the sort nat and the operations 0, S, eqnat) lessnat and ifnat- Correspondingly, any 
standard Z'-algebra A can be N- standardised to an algebra by adjoining the carrier N 
together with the corresponding standard functions: 



algebra 




import 


A,J\f 


end 





Examples, (a) The simplest N-standard algebra is jV (Example (6) in §1.3). 

(b) The N-standard algebra TZ^ of reals is formed by N-standardising the standard real 
algebra TZ (Example (c) in §1.3). 

NStdAlg [E) denotes the class of all N-standard i7-algebras. 

N-standardness Assumption. We will assume throughout this paper that the signa- 
tures and algebras are N-standard, except where stated otherwise. 

We also consider a notion stricter than N-standardness. 

1.5 Strictly N-standard signatures and algebras 

An N-standard signature U is strictly N-standard if the only operations of E with range 
sort nat or bool are the standard numerical operations 0, S, ifnat eqnat, lesSnat (§1-4) and 
the boolean operations true, false, and, or, not (§1.1). An algebra is strictly N-standard if 
its signature is. 

Remarks. 

(1) Any N-standardised signature and algebra are automatically strictly N-standard. 

(2) A strictly N-standard signature has no equality sorts other than nat. 

(3) Any subterm of a term of sort nat or bool of a strictly standard signature is itself 
of sort nat or bool. (Proved by structural induction on the term.) 

The notion of strict N-standardness will be used in Section 9. 

1.6 Adding arrays: Algebras A* of signature E* 

The significance of arrays for computation is that they provide finite but unbounded mem- 
ory. 

Given a standard signature E, and standard Z'-algebra A, we expand E and A in two 

stages: 

(1°) N-standardise these to form E^ and A^ , as in §1.3. 

(2°) Define, for each sort s of E, the carrier A* to be the set of finite sequences or arrays 
a* over Ag, of "starred sort" s*. 
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The reason for introducing starred sorts is the lack of effective coding of finite sequences 
within abstract algebras in general. (Note that, for simplicity, our definition excludes a 
starred sort nat*, which would be redundant.) 

The resulting algebras A* have signature U*, which expands by including, for each 
sort s oi the new starred sort s*, and also the following new function symbols: 

(i) the operator Lgthg : s* — > nat, where Lgth(a*) is the length of the array a*; 

(ii) the application operator Ap^ : s* x nat s, where 



where is the default value at sort s guaranteed by the Instantiation Assumption (§1.1)^; 
(iii) the null array Nulls '■ s* of zero length; 



(iv) the operator Updates '■ ■§* x nat x s — s*, where Update^(a*, n, x) is the array 
b* e Al of length Lgth(6*) = Lgth(a*), such that for aU k < Lgth(a*) 



(v) the operator Newlengthg : s* x nat s*, where Newlength^(a*, m) is the array b* 
of length m such that for all k < m, 



(vi) the conditional on A* for each sort s; and 

(vii) the equality operator on A^ for each equality sort s. 

Note that A* is an N-standard E*- expansion of A. 

The justification for (vii) is that if a sort s has "computable" equality, then clearly so 
has the sort s*, since it amounts to testing equality of finitely many pairs of objects of sort 
s, up to a computable length. 

2 Proof systems and theories for i^-algebras 

To reason about computations, we choose a first-order language based on 17 as a specifi- 
cation language. 

Note, in this connection, that the operations in U are used for computation. In par- 
ticular, boolean- valued operations are used for tests in computations. By contrast, for 
specification and reasoning about these algebras, we may add predicates to the language, 

^We assume that a*[k] is undefined for k > Lgth(a*). 





if k ^ n 
if k = n 



b*[k] = 



a*[k] ii k< Lgth(a*) 

6' if Lgth(a*) < k < m 
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which are not, in general, computable or testable. For example, our specification language 
will include the equality predicate at all sorts (as we will see), whereas only the equality 
sorts s have the "computable" equality operator eq^ (§1.3). In writing specifications on 
the reals we may also add the '<' predicate (again, not computable, at least if defined to- 
tally), as we will do later (§5.3) for the specification of approximable comput ability. Note 
that these predicates added to the language do not form part of the signature. Intuitively, 
think of the equality operation as a "computable" boolean test, but the equality predicate 
as a "provable" assertion of equality between two terms. 

So let Lang{E) be the first order language over the signature Z', with the equality 
predicate at all sorts. The syntax of Lang{S) is generated as follows. For each E-sori s 
there are countably many variables of sort s, denoted a, b, . . . , x, y, . . . . Next, for each 
Z'-sort s, there are terms of sort s, generated from variables and the function symbols of 
S according to the standard typing rules. We write or t : s if t is a term of sort s, 
and, for a product type tt = si x • • • x Sm-, we write t : u if t is a tt-tuple of terms, i.e., an 
m-tuple of terms of type si x • • • x s^- 

The atomic formulae of Lang{U), then, are equations (tf = tl) between terms of 
sort s, for all Z'-sorts s (whether equality sorts or not), and the prepositional constants 
true and false. Formulae of Lang{E) are built up from these by the logical connectives 
A, V, -1, and the quantifiers Vg and 3^ for all sorts s of E. 

We will consider (in the following four subsections) four formal systems in Lang{U), 
conveniently formulated as sequent calculi. The first is our basic system F0L(i7), full first 
order logic with equality over E. The next two are subsystems of this, which will be used 
in Section 7. The final system is a subsystem of FOL(Z'), extended by an infinitary proof 
rule. 

Background information on sequent calculus proof systems can be found in [Tak87] . 

Note that we do not assume (N-)standardness of E in subsections 2.1 and 2.2 (only) 
below. 

2.1 FOL{E): Full first order logic with equality over E 

This can be formulated in a system LKq{E), which is an adaptation to the many-sorted 
signature E of the systems LK and LKe of [Gen69, Tak87]. The atomic formulae are 
equations at all Z'-sorts. 

A sequent of LKe(i^) is a construct of the form F \ — > A, where F and A are each finite 
sequences of formulae of Lang{E). 

Derivations (of sequents) are then constructed from certain specified initial sequents 
("axioms") by means of specified inference rules. 

The system LKe can be augmented in two ways: 

(a) Adding axioms of a theory., or rather all substitution instances of these, as initial 
sequents; 

ih) Adding induction for a class C of formulae (in case E is N-standard), in the form of 

ACM Transactions on Computational Logic, Vol. TBD, No. TBD, TBD TED. 



13 



the inference rule 

Ti — ^A,F(0) F(a),ni — ^A,F(Sa) 



C-\nd{E) 



r,ni — >A,A,F{t) 



where the induction variable a has sort nat, and the induction formula -F'(a) belongs to 
the class C. We write Ind(Z') for full Z'-induction, i.e., where C is the set of all first-order 
Z'-formulae. 

We will also be interested in the "intuitionistic" version C-lndj of C-Ind, in which the 
sequences A and A above are empty. 

Analogous augmentations can be made for the other systems considered below. 

In the next three subsections we will consider three further systems, the first two of which 
are subsystems of FOL(Z') and the third of which is a subsystem of FOL{U) augmented 
by an infinitary a;-rule. These subsystems are, in fact, also subsystems of LJe(i^), which 
is an adaptation to E of the "intuitionistic" system LJe {loc. cit.), in which the sequents 
have only one formula on the rhs. (When we are working with these subsystems, the 
scheme C-Ind will consist of intuitionistic sequents, so that the sequences A and A above 
are empty.) 

2.2 CondEq(Z'): conditional equational logic over E 

A conditional equation is a formula of the form 

Pi A . . . A P„ ^ P (*) 

where n > and Pi and P are equations. A conditional equational theory is a set of such 
formulae (or their universal closures). An equational sequent is a sequent of the form 

Pi , . . . , Pn I > P 

where n > and Pi and P are equations. This sequent corresponds to the conditional 
equation (*). 

The initial sequents are all substitution instances of the Z'-equality axioms (expressing 
that equality is a congruence relation with respect to 17), and the inferences are structural 
inferences., atomic cuts and substitution of terms for free variables in sequents. 

2.3 CondBUEq(Z'): Conditional BU equational logic over E 

A BU (bounded universal) quantifier is a quantifier of the form 'Vz < t\ where z : nat and 
t : nat. (The most elegant approach is to think of this as a primitive construct, with its 
own introduction rule: see below.) A {E-)BU equation is formed by prefixing an equation 
by a string of or more bounded universal quantifiers. A conditional BU equation is a 
formula of the form 

Ql^...^Qn^Q (**) 
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where n > and Qi and Q are BU equations. A conditional BU equational theory is a set 
of such formulae (or their universal closures). A BU equational sequent is a sequent of the 
form 

Qi, ■ ■ ■ , Qn I — ^ Q 

where n > and Qi and Q are BU equations. This sequent corresponds to the conditional 
BU equation (**). 

The system CondBUEq(Z') consists of BU equational sequents. The initial sequents are 
the Z'-equality axioms, as before, plus the boundedness axioms 

BddAx(i:): P(0),...,P(rrn:) I — > Vz<^P(z) 

for all Z'-equations P and all n e N, where n is the numeral for n, i.e., the term S ... SO 
(n times 'S'). The only inferences are structural inferences, cut, substitution, and the rules 
for the BU quantifiers: 

T^s<t Q{s),A^Q a<t,r^Q(a) 

^ ■ Vz<tQ(z),r,A^g r^Vz<tQ(z) 

where s and t are terms of sort nat, 's < t' stands for 'lessnat(s, t) = true', and the 
variable a : nat is the ' eigenvariable^ of the inference V^-R, which does not occur in the 
conclusion of that inference. 

Remark (Boundedness axioms). The boundedness axioms BddAx(Z') hold (of course) 
in N-standard models. We remark here that they are derivable in FOL(Z') from the N- 
standardness axioms NStdAxo(i^) (a set of conditional equations defined in §7.2), plus the 
single formula 

Zi < SZ2 > Zi < Z2 V Zi = Z2 

which is, however, not a conditional BU equation. This formula is derivable, in turn, in 
FOL(Z') + QF-lnd(Z') (induction for quantifier- free formulae) , from NStdAxo(X'). It is not 
clear whether the boundedness axioms are derivable in conditional BU equational logic 
alone from NStdAxo(i^), which is why we are adding them as axioms. 

2.4 CondSUEqt^(Z'): Conditional SU equational logic over E 

The final two systems that interest us, in this and the next subsection, are not subsystems 
of LKe, but infinitary systems. They will be used for another illustration of a Malcev-type 
theorem for N-standard algebras (see Section 6, Theorem 4). However they will not be used 
in the investigation of the relationship between computability and algebraic specifiability 
in Section 8. 

A {IJ-)SU (standard universal) equation is formed by prefixing an equation by a string 
of or more universal quantifiers of sort nat. A conditional SU equation is a formula of 
the form 

RiA...ARn^R {***) 
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where n > and i?j and R are SU equations. A conditional SU equational theory is a set 
of such formulae (or their universal closures). An SU equational sequent is a sequent of 
the form 

i?i , . . . , Rn I — > R 

where n > and Ri and R are SU equations. This sequent corresponds to the conditional 
SU equation (***). 

The system CondSUEq(^(Z') contains SU equational sequents. It contains the equality 
axioms and the following inferences: the structural inferences, cut, and the following rules 
for the universal number quantifier (where t : nat): 

Rit),T^R ... T^Rjn) ... (aU n e M) 

Vzi?(z),r^i? r ^ Vzi?(z) 

Note that the rule V^^i? is actually an infinitary u-rule. 

2.5 FOL^,(Z'): full first-order logic with equality and an a;-rule over E 

This modifies the system F0L(i7) (§2.1) by replacing the usual universal number quantifier 
rule Vil by the infinitary rule V^^i? (§2-4), with also the corresponding rule B^^L dually. 
We omit details, except to point out that FOL + Ind(Z') can easily be interpreted in it. 

We write Eq{E), BUEq{E) and SUEq{S) for the classes of equations, BU equations 
and SU equations (respectively) over E. 

2.6 Conservativity lemmas 

One reason for the importance of (finite or infinite) conditional equational logic lies in 
the following lemmas. First we need a definition which will be given again in context in 
Section 7. Let .F be a formal system (typically CondEq(Z') or CondEq;^(Z')), and let T 
be a theory over E (typically a conditional equational or ^-conditional equational theory). 
We say that T determines nat in T if every closed term of sort nat is, provably in from 
T, equal to a numeral. 

(1) (FOL over CondEq.) Let i? be a Z'-conditional equational theory, and let F i — > P 
be a i7-equational sequent. Then F i — > P is provable from E in F0L(i7) if, and only if, 
it is provable from E in CondEq (Z"). 

(2) (FOL + Ind over CondEq.) Let £' be a ^^-conditional equational theory which de- 
termines nat in CondEq (Z"), and let F i — > P be a closed i7-equational sequent. Then 
F I — )• P is provable from E in FOL(Z') -|- Ind(Z') if, and only if, it is provable from E in 
CondEq(r). 

(3) (FOL -I- Ind over CondBUEq.) Let F be a Z'-conditional BU equational theory which 
determines nat in CondBUEq(Z'), and let F i — > Q be a closed Z'-BU equational sequent. 
Then F i — > Q is provable from F in FOL (17) -|- \n6{E) if, and only if, it is provable from 
F in CondBUEq(i:). 

(4) (FOL^j over CondSUEqi^.) Let G be a Z'-conditional SU equational theory over E 
which determines nat in CondSUEqj^(Z'), and let F i — > i? be a closed Z'-conditional SU 
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equational sequent. Then T i — > R is provable from G in FOLi^{S) if, and only if, it is 
provable from G in CondSUEqi^(Z'). 

All four lemmas can be proved by cut elimination. We omit proofs, except to note briefly 
that the two conditions, that E determines nat and that F i — > P is closed, are used in 
(2) and (3) to eliminate induction inferences, and in (4) to eliminate cuts of formulae 
universally or existentially quantified over nat. 

Remarks. (1) These conservativity lemmas (at least for simple equations) also follow 
from the Birkhoff-Mal'cev-type completeness theorems 1-4 in Section 7. 

(2) Infinitary systems come into their own when reasoning about infinite objects such as 
infinite streams of data. Some applications in this direction, using a related infinitary 
system (CondEq^^), are given in [TZOlb]. 

3 Specifiability of functions by theories 

3.1 Specifiability over algebras and over classes of algebras 

Recall from Section 2 that Lang{S) is the first order language over E, with equality as 
the only predicate at all sorts. 

A S-theory is just a set T of formulae in Lang{U). The axioms of T are the formulae in 
T. We will be particularly interested in theories T satisfying certain syntactic conditions; 
for example, T might be a set of conditional equations. This is considered more carefully 
in Section 7. 

We are also interested (when E is N-standard) in classes K of the N-standard models 
of such Z'-theories: K = NStdAlg{S,T) C NStdAlg {S). In this case we say also that 
{S, T) is an (N-standard) specification for the adt K. 

Assume, for the rest of this section, that E, E' and E" are N-standard signatures with 
E C E' C. E" . Also, A is an N-standard E -algebra and A' is an N-standard E' -algebra. 
Also, T is a E-theory, T' is a E' -theory and T" is a E" -theory. 

Note that any expansion of a standard algebra is also standard, and any expansion of 
an N-standard algebra is also N-standard. 

Definition 1. Let A'^ and A'2 be two i^'-algebras with A'^^ | x' = ^2 I ^- Then A'^ and A'2 
are E /E -isomorphic, written A'-^ j-^ A2, if there is a, E -isomorphism from A'^ to A2 
whose restriction to E is the identity on | i:. 

Definition 2. Suppose A' is a i^'-expansion of A. We say that {E' , T') specifies A' over 
A iff ^' is the unique (up to Z''/i7-isomorphism) ^''-expansion of A satisfying T'; in other 
words: 

{i) A' h T'; and 

(n) for aU ^'-expansions B' of A, if B' ^ V then B' =^>/^ A'. 
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We will occasionally write: "T' specifies A' over ^" instead of "(i^', T') specifies A' 
over A\ 

An important special case of Definition 2 is the following. 

Definition 2^ . Suppose S' = S U {f}. We say that {S',T') specifies f over A iff 
/ is the unique (up to ^-isomorphism) function on A (of the type of f) such that 

Definition 3. Suppose A' is a i^'-expansion of A. We say that {U" , T") specifies A' 
over A with hidden sorts and/ or functions iff A' is the unique (up to ^''/^'-isomorphism) 
i^'-expansion of A such that some ^'''-expansion of A' satisfies T"; in other words: 

(1) A' is a i^'-reduct of a Z'^'-model of T"; and 

(ii) for all i^'-expansions B' of A, if B' is a i^'-reduct of a standard ^'''-model of T", 
then B' =s'/e A'. 

Again, an important special case: 

Definition 3-''. Suppose E' = E\j{f}. We say that {E",T") specifies f over A with 
hidden sorts and/or functions iff / is the unique function on A (of the type of f ) such that 
some Z'"-expansion of {A, /) satisfies T". 

Definition 4. An operator $ : NStdAlg (U) — >■ NStdAlg[E') is expanding (over U) 
iff for all N-standard Z'-algebras A, $(A) is a i7'-expansion of A, i.e., ^{A) \ x: = A. 

Example. The array construction At-^ A* is an expanding operator. 

Assume further, for the rest of this section, that $ : NStdAlg (S) — > NStdAlg{E') 
is an expanding operator over E, and that K C NStdAlg (E). 

Notation. (1) We will write for $(A). 

(2) We write for (the closure w.r.t. i^'-isomorphism of) the class {^4* | A e K} C 
NStdAlg {E'). 

Definition 5. 

(a) (E', T') specifies $ uniformly over K iff for all A e K, {E' , T') specifies A^ over A. 

(6) {E' .,T') specifies $ uniformly over E iff {E',T') specifies ^> uniformly over 
NStdAlg {E). 

Proposition 1. Suppose {E',T') specifies $ uniformly overK. 

(i) For AeK, A\=T ^ A^ \=T + T'. 

(ii) If K= NStdAlg {E,T), tlien = NStdAlg {E' , T + T') . 
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Definition 6. 

(a) {IJ",T") specifies $ uniformly over K with hidden sorts and/ or functions iff for all 
A e K, {S", T") specifies A* over A with hidden sorts and/or functions. 

(6) (Z"", T") specifies $ uniformly over E with hidden sorts and/ or functions iff {S" ^ T") 
specifies $ uniformly over NStdAlg (E) with hidden sorts and/or functions. 

Proposition 2. Suppose {E" , T") specifies $ uniformly over E witli hidden sorts and/or 
functions. 

(i) A^T ^ isa E' -retract of a E" -model of T + T" . 

(ii) If K = NStdAlg {E,T), then K* = {NStdAlg{E", T + T")) \ . 

Interesting special cases of the above notions, in which the theories T, T' and T" are 
subject to certain syntactic conditions, are considered below (§3.3) and in Section 7. First 
we give an important example of a specification of an expanding operator. 

We write conditional equational specification and conditional BU equational specification 
for specifications in which the formulae are all conditional equations and conditional BU 
equations, respectively. 

3.2 Conditional BU equational specification of the array construction 

Let ArrAx(Z') be the following set of axioms in A (dropping sort subscripts): 



Lgth(Null) = 0, 






lessnat(z, Lgth(a)) = false — > Ap(a, z) = 


= s, 




Lgth(Update(a,z,x)) = Lgth(a), 






eqnat(z, zo) = false Ap(Update(a, zq, x), z) 


= Ap(a, 


z), 


lessnat(z, Lgth(a)) = true — > Ap(Update(a, z, x), z) = 




Lgth(Newlength(a, z)) = z. 






lessnat(z, zi) = true — > Ap(Newlength(a, zi), z) 


= Ap(a 


,z). 


Lgth(ai) = Lgth(a2) A Vz < Lgth(ai) [Ap(ai, z) = Ap(a2, 


z)] 


ai = a2. 



The last axiom relates equality on s* to equality on s, for all equality sorts s except nat 
(since there is no starred sort nat*, as explained in §1.6). 

Note that all the axioms of ArrAx(i7) are conditional equations, except for the last one, 
which is a conditional BU equation! 

Theorem 1. The specification (Z'*, ArrAx(Z')) specifies the array construction At-^A* 
uniformly over E. 

Proof (outline): Given an N-standard Z'-algebra ^, and a i7-sort s, the axioms for 
'Null', 'Newlength' and 'Update' guarantee that at least all the "standard" arrays over As 
are present (or can be "constructed"). On the other hand, the axiom for array equality 
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guarantees that there are no "non-standard" arrays, i.e., no elements of other than 
these. □ 

This array specification will be considered again, from the viewpoints of specification of 
//PR* computations (§5.2), and initial algebra specifications (§8.2). 

3.3 Reducing conditional BU to conditional equational specifications 

Theorem 2 (BU elimination). Let E C S' , let A' be a U' -expansion of A, and let 
F be a conditional BU equational E' -theory which specifies A' over A. Then there is an 
expansion U" of S' by function symbols, and a conditional equational U" -theory E which 
specifies A' over A, with hidden functions. If F contains q occurrences of BU quantifiers, 
then E" expands S' by q new function symbols. Moreover, if F is finite, with e axioms 
(say), then so is E, with e-\- Aq axioms. 

Proof: The idea is to incorporate in the signature, for each BU quantifier occurring in 
F, a characteristic function for that quantifier, or (expressed differently) a function which 
computes that quantifier. Consider (for notational simplicity) the case of an equation with 
a single BU quantifier 

Vz < s(x) [ti(z,x) =t2(z,x)]. (*) 

with X : u. (In the general case, we "eliminate" the quantifiers successively, from the inside 
out.) We adjoin, for each such BU quantifier (*) occurring in F, a boolean-valued function 
symbol 

f : nat x u ^ bool 

intended to satisfy in A 

f(n, a;) = true <(=^ \/z < n\t\{z,x) — t2{z,x)\. 

for all n G N, x G A^ . This interpretation is imposed on f by adjoining to F the following 
axioms giving the inductive definition for f: 

f(0, x) = true 

f(z, x) = true A ti(z, x) = t2(z, x) — > f(Sz,x)=true 

(***) 

f(Sz, x) = true — > f(z, x) = true 
f(Sz,x)=true — > ti(z, x) = t2(z, x) 

and replacing (*) in F by 

f(s(x),x) = true. (****) 

In this way we replace F by a conditional equational Z'"-theory E, with the stated prop- 
erties. □ 

Note that if F contains infinitely many occurences of BU quantifiers, then S" contains, 
correspondingly, infinitely many new function symbols, which is (strictly speaking) not 
allowed by our definition of signature, although it is harmless enough here. 
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We will return to this topic in the context of initial algebra specifications in §7.7. 
4 Computable functions 

In this section we consider various notions of computability over abstract algebras. (An 
equivalent approach, using an imperative model of programming featuring the ' while' con- 
struct, was developed in [TZ88, TZOO] where the equivalence of these two approaches are 
explained.) In §4.1 two computability classes are introduced. In §4.2 two more classes are 
formed by adjoining the fx operator to these. 

4.1 PR(i:) and PR*(i:) computable functions 

Given an N-standard signature U, we define PR schemes over U which generalise the 
schemes for primitive recursive functions over N in [Kle52] . They define (total) functions / 
either outright (as in the base cases (z) — [ii) below) or from other functions (g, . . . , h, . . .) 
(as in the inductive cases (Hi) — (v)) as follows: 

(a) Basic schemes: Initial functions 

(i) Primitive E-functions: 

fix) = F{x) 
fix) = c 

of type u ^ s, for all the primitive function symbols F: u ^ s and constant symbols 
c of U, where x : u. 

(a) Projection: 

fix) = Xi 

of type u Si, where x — (xi, . . . , Xm) is of type u — si x ■ ■ ■ x Sm- 

(b) Inductive schemes: 
iiii) Composition: 

fix) = higiix), . . . ,gmix)) 
of type tt — > s, where ^fj : m — > Sj (i = 1, . . . , m) and /i : si x • • • x — > s. 
iiv) Definition by cases: 

^ ^ f x if b = tt 

= U itb = f 

of type bool x — > s. 

iv) Simultaneous primitive recursion on N: This defines, on each A G NStdAlg (Z"), for 
fixed m > (the degree of simultaneity), n > (the number of parameters), and 
product types u and v — si x ■ ■ ■ x Sm, an m-tuple of functions / = (/i, . . . , fm) 
with fi : nat x « — > s^, such that for all x E A'^ and z = 1, . . . , m, 

/i(0,x) = g^ix) 

fiiz + l,x) = hiiz,X,fiiz,x),...,frniz,x)) 
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where Qi'. u ^ Si and hi : nat x u x v ^ si (z = 1, . . . , m). 

Note that the last scheme uses the N-standardness of the algebras, i.e. the carrier N. 

For details of the syntax and semantics of PR schemes, see [TZ88, §4.1.5], from which 
it can be seen that a scheme for a function contains (hereditarily) the schemes for all the 
auxiliary functions used to define it. 

In the context of algebraic specification theory, it often turns out to be more convenient 
to work with PR derivations instead of PR schemes. A PR derivation is, roughly, a "linear 
version" of a PR scheme, in which all the auxiliary functions are displayed in a list. More 
precisely: 

Definition (PR derivation). A PR{E) derivation a is a list of pairs 

« = ((/o,(^o), (/l,(^l), ••• {fn,(Tn)) (*) 

of functions (actually function symbols) fi and PR schemes ai {i = 1,...,?2) where for 
each i, either fi is an initial function, or fi is defined by from functions fj, for certain 
j < i. The derivation a is said to be a PR derivation of fn, with auxiliary functions 
/o, . . . , fn-i- The type of a is the type of /„. 

Notation. A PR(Z')„_>s scheme (or derivation) is a PR(Z') scheme (or derivation) of 
type tt — > s. 

Remarks. (1) The formalism of PR(i7) derivations is equivalent to that of PR(i7) 
schemes: from a PR scheme we can derive an equivalent PR derivation by "linearising" 
the subschemes, and conversely, given the derivation (*), the scheme Un is equivalent to 
it. Below, we will usually work with derivations. 

(2) A PR(r) 

u-^s derivation a: u — > s defines, or rather computes, a function f^, : A"' — > 
As, or, more generally, a family of functions {f^ | ^ e NStdAlg (U) } uniformly over 
NStdAlg {E). 

(3) We assume a standard Godel numbering of PR(Z') derivations, writing '"a"' for the 
Godel number of derivation a. 

It turns out that a broader class of functions provides a better generalisation of the 
notion of primitive recursiveness, namely PR* computahility. A function on A is PR* (17) 
computable if it is defined by a PR derivation over Z"*, interpreted on A* [i.e., using 
starred sorts for the aiixiliary functions used in its definition). 

4.2 /xPR(X') and /liPR*(X') computable functions 

The //PR schemes over E are formed by adding to the PR schemes of §4.1 the inductive 
scheme: 

{vi) Least number or jj. operator: 

f{x) ~ f^z[g{x, z) = tt] 
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of type u — > nat, where g : u x nat — > bool is //PR. Here f{x) I z if, and only if, 
9i^j y) for each y < z and g{x, z) I tt. 

Note that this scheme also uses the N-standardness of the algebra. Also, /xPR computable 
functions are, in general, partial. We use the notation f{x) i y to mean that f{x) is 
defined and equal to y. The notation '~' means that the two sides are either both defined 
and equal, or both undefined. The schemes for composition and simultaneous primitive 
recursion are correspondingly re-interpreted to allow for partial functions. 

These schemes generalise the schemes given in [Kle52] for partial recursive functions 
over N. 

As before, we can define the concepts of /uPR(Z') derivations and /xPR(Z') computahility . 

Again, a broader class turns out to be more useful, namely jjiPR* computahility. This 
is just PR* computahility with 

Notation. PR(A) is the class of functions PR computable on A, and 'P'R.{A)u^s is the 
subclass of PR(A) of functions of type u — > s. Similarly for PR* (A), //PR(A), etc. 

There are many other models of computahility, due to Moschovakis, Friedman, Shep- 
herdson and others, which turn out to be equivalent to //PR* computahility: see [TZOO, §7]. 
All these equivalences have led to the postulation of a generalised Church-Turing Thesis 
for deterministic computation of functions, which can be roughly formulated as follows: 

Computahility of functions on many-sorted algebras by deterministic algorithms 
can be formalised by jiPR* computability. 

4.3 Equivalent imperative programming models of computation 

In [TZOO] we investigate computation on many-sorted Z'-algebras, using imperative pro- 
gramming models: While{S), based on the 'while' loop construct over U, For{U), 
based similarly on the 'for' loop, and While* {U) and For*{U), which use arrays, i.e., 
auxiliary variables of starred sort over U. 

Writing While{A) for the class of functions WTiiZe-computable on A, etc., we can 
list the equivalences between the "schematic" and "imperative" computational models as 
follows. 

Theorem. 

(i) PR{A) = For{A) 

(ii) PR* (A) = For* (A) 
(Hi) ijPR{A) - While{A) 

(iv) fiPR*{A) = While* (A), 
in all cases, uniformly for A e NStdAlg (E). 

These results are all stated in [TZOO] , and can be proved by the methods of [TZ88] . 
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4.4 Universal Function Theorem for /xPR* 

The following is a uniform version of a theorem proved in [TZOO, §4.9] (using the equivalent 
formalism of While* programs): 

Theorem. For any U- function typeu s, there is a ^PR*{E) derivation v : nat x tt — > s 
which is universal for fj,PR*{E) derivations of type u —>■ s. 

In other words, we can enumerate all the jiPK* derivations of type m — > s: 

ao, ai, a2, ... 

so that, putting 

<pt =df ft: A- As 

and 

Univ^^^ = : N X ^ 

we have 

Univ^^^{i,a) = (pf{a) 
for all A e NStdAlg {E) and z = 0, 1, 2, . . . . 

Remarks (Canonical forms of /xPR* derivations). (1) From the construction 
of the universal /uPR*(Z')„^s derivation v [TZOO, §4], it can be seen that v uses the 
iU-operator exactly once. 

(2) For any |uPR*(Z')^j^s derivation a, the universal derivation v: nat x u ^ s provides 
an eqnivalent canonical or normal form derivation d, such that = for all N-standard 
Z'-algebras A. This canonical derivation is formed in a simple way from v, essentially by 
substituting the Godel number '"a"' of a for the distinguished nat variable of v, so that 
for all N-standard A, 

M — _ (A 

^& — ¥'i"ai — Tq,- 

This is, in fact, a generalisation to NStdAlg (U) of Kleene's Normal Form Theorem for 
(essentially) //PR(AA) [Kle52]. 

(3) Prom the constructions in (1) and (2) it follows that a also uses the //-operator exactly 
once, and in such a way that for any N-standard A, 

is total if, and only if, this application of the /i-operator is total on A. 

5 Algebraic specifications for computable functions 

We will consider functions / computable on a Z'-algebra, by PR and //PR* derivations, 
and show that they are algebraically specifiable by conditional equational, and conditional 
BU equational, theories. 

We will also consider, in the context of metric algebras {i.e., algebras with metrics 
such that the functions in the signature are continuous) a broader class of functions than 

ACM Transactions on Computational Logic, Vol. TBD, No. TBD, TBD TED. 



24 



//PR* computable, namely those functions uniformly approximable by //PR* computable 
functions, and show that such functions are specifiable by conditional equations and in- 
equalities, which are conditional formulae built up from inequalities (ti < t2) on the reals 
as well as equations {ti = t2) between terms of the same sort. 

5.1 Algebraic specifications for PR computable functions 

Let S be an N-standard signature. For each PR(Z') derivation a, there is a finite set 
Ea of "specifying equations" for the function /, as well as the auxiliary functions g = 
{9i,---,9kJ, defined by a. 

The set Ea. consists of equations in an expanded signature Ua = ^ U {gaj^a}, where 
Sa = Sq 1 5 • • • » Sa fee • It is defined by course of values induction on the length of the 
derivation a, with cases (z) — (v) (§4.1) according to the last scheme in a. In fact, E^t is 
formed by adjoining, in each case, specifying equation(s) like those shown for that case 
in §4.1. These are simple {i.e., not conditional) equations; for example, in the case (iv) 
definition by cases, there are two equations: 

f(true, X, y) = x 
f (false, x, y) = y 

and in the case (v) simultaneous primitive recursion, there are 2m equations (where m is 
the degree of simultaneity): 

f,(0, x) = g,(x) 
fi(z + l, x) = hi(z, X, fi(z,x), . . . ,f^(z,x)) 

for i = 1, . . . ,m. 

Thus we have an effective map a i— > {Eo,,Ea) from PR(Z') derivations to (simple) 
equational specifications. 

Now for each PR derivation a and N-standard Z'-algebra A, let f^ be the function on 
A computed by a, and let be the corresponding aiixiliary functions on A. Consider 
the operators 

A ^ {A, f^) (*) 

and 

A ^ {A, gt f^). (**) 

Recall the definition of uniform specification of an operator over a class of Z'-algebras 
(§3.1, Definitons 5 and 6). 

Theorem 1 (Equational specification of PR functions). For each PR{E) derivation 
a, the equational specihcation {Eci,Ea) specifies the operator (**) uniformly over A G 
NStdAlg [E). Hence it specifies the operator (* ) uniformly over all N-standard E-algebras 
A, with hidden functions. 

Proof: By course of values induction on the length of a. □ 
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In other words, the equations specify not only , but also the auxiliary functions 
g^, uniformly over all N-standard Z'-algebras A. 

Similarly with PR* computability: for a PR*(Z') derivation a, let Ea be the set of 
specifying equations for the function fo, and the auxiliary functions g^, defined by a, in 
the signature E*^ = E* L) {gQ,fa}- 

CoroUeiry. For each PR* (E ) derivation a, the equational specihcation (Z** , Ea) speciGes 
the operator (* ) uniformly over E, with hidden sorts and functions. 

5.2 Algebraic specifications for /zPR* computable functions 

We now consider //PR*(Z') derivations a. For each such derivation there is again a finite 
set Fa of "specifying equations" for the fiuiction / defined by a and its auxiliary functions 
g. This set is constructed like Ea (§5.1), by structural induction on a. Now, however. Fa 
consists of conditional BU equations in a signature Z"* = E* U {g^^fa}, because of the 
new case, i.e., scheme {vi) for the /x-operator (§4.2), which results in the addition to Fa of 
the conditional BU equation 

(F^) Vz < y(go(x, z) = false) A (go(x, y) = true) — > f(x) = y. 

Again we have an effective map a ^ (Z'*,Fq,) from //PR*(Z') derivations to condi- 
tional BU equational specifications. 

Now there are complications in the theory, since /xPR* computable functions are, in 
general, partial. We intend to study specification theory for partial algebras systematically 
in a future paper. Here we limit ourselves to the case where the //PR* computable function 
is, in fact, total. 

As before, for a //PR* derivation a and an N-standard Z'-algebra A, let be the 
function on A defined by a, and let be corresponding auxiliary functions on ^*. A 
further problem is that, even if f^ is total, the functions g^ might not be. We will now 
show that we can, without loss of generality, restrict attention to the case that the g^ 
are also total. We accomplish this by the use of the uniform derivations provided by the 
Universal Function Theorem for /tPR* (§4.4), as we now explain. 

Definition. A /tPR* derivation a is total on A iff the auxiliary functions g^, as well as 
fa, are aU total on A*. 

Totality Lemma. Given any /iPR*(i7) derivation a: u ^ s, we can effectively find a 
/iPR*(Z') derivation a: u ^ s such that for any N-standard Z'-algebra A, 

(i) = fa; 

(n) if fa is total, then a is total on A. 

Proof: This follows from the Universal Function Theorem and the three remarks following 
it (§4.4). □ 
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Now consider the operators (*) (§5.1 above) and 

A ^ {A% gt f^) (***) 

where a is constructed from a as in the totality lemma. Let Z"* = i7*U{ g^, fa }. Recall the 
definition of the array specification ArrAx(Z') in §3.2, and the definition of the conditional 
BU specification of f;^ (= f;^). 

Theorem 2 (Conditional BU equational specification of /xPR* functions). 

For each iiPR* [E) derivation a, let 

F* =df ArrAx(r) + F& 

where a is constructed from a as in the tot ahty lemma. Then the conditional BU equational 
specihcation (i^*, F*) specihes the operator (***) in the following sense: for any A on 
which is total, 

iA\ gt f^) h K- 

Hence [E*^, F*) specifies the operator (*) uniformly over all N-standard U -algebras A on 
which is total, with hidden sorts and functions. 

Proof: As with Theorem 1, by course of values induction on the length of ck. □ 

Note that the specification given in Theorem 2 is uniform over all N-standard Z'-algebras 
A on which a is total. In fact, there is a stronger form of uniformity for fiPK* computabil- 
ity, following from the Universal Function Theorem for /xPR*. (Actually, this is already 
implicit in the construction of the derivation a in the totality lemma, which is really a 
normal form lemma for /xFR* derivations.) 

Theorem 3 (Universal conditional BU equational specification). For each U- 
function type u ^ s we can effectively Gnd a signature ^l^^g which expands S* by func- 
tion symbols, and a finite conditional BU equational specification (i^* g, F^s(z)) which 
is universal for specifications of total iJ,PR*{E) -computable functions of that type, in 
the following sense: it contains a distinguished number variable z such that for each 
liPR*{S) derivation a : u ^ s, and each N-standard S-algebra A, if is total on A, 
then {S^^g, F^^g{k)), where k = '"a"', specifies f^ on A, with hidden sorts and functions. 

(Here F^^ik) is the result of substituting the numeral k for z in F^g{z).) 

Next, by the BU Reduction Theorem (Theorem 2 in Section 3), we derive as a corollary 
to Theorem 3: 

Theorem 4 (Universal conditional equational specification). For each S-function 
type u ^ s we can effectively find a signature Z'*'^ which expands ^^,8 (^^ Theo- 
rem 3) by function symbols, and a Gnite conditional specification (Z^'^, E}^ g{z)) which 

is universal for specifications of total fiPR^ (S) -computable functions of that type, in 
the following sense: it contains a distinguished number variable z such that for each 
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fiPR*{S) derivation a : u ^ s, and each N-standard U-algebra A, if is total on A, 
then {S^s, where k = '"a"', speciG.es on A, with hidden sorts and functions. 

From the above uniformity theorems it foUows triviaUy that for a given i7-function type 
tt — > s there is a uniform bound to the lengths of conditional BU Z'*-specifications, or 
conditional equational Z'*-specifications respectively, for total /iPR*-computable functions 
on N-standard Z'-algebras. 

6 Algebraic specifications for computably approximable functions 

We have shown that 

computability =^ algebraic specifiability 

where (for example) if "computability" means //PR* (or, equivalently. While*) compu- 
tability, then "algebraic specifiability" means specifiability by conditional BU equations. 

It is natural to ask in what sense a converse holds. We will see (below) that a full converse 
to the above cannot be expected, since algebraic specifiability is more powerful, in some 
sense, than |uPR*-computability. (In Section 7 we will investigate partial converses.) We 
show here in fact that, on metric algebras, 

computable approximability =^ algebraic specihability. 

"Computable approximability" , to be defined shortly, is a strong extension of the notion 
of computability; while "algebraic specifiability" will be (re-) defined so as to permit the 
order relation (as well as equality) between pairs of terms of sort real. 

6.1 Metric algebras 

We refer to [TZ99] and [TZOO, §6] for definitions of (total) metric algebra and related 
concepts. We review some definitions and results from these references. (Note that in 
these references the subject is discussed in the broader context of partial algebras.) 

A metric E-algebra (A, d), based on a E-algebra ^4, is an algebra of the form 



algebra 


{A,d) 




import 


A 




carriers 


R 




functions 


ds-.Al^M. 


{s e Sort{E)) 


end 







where cZ is a family (dg | s e Sort{U)) of metrics dg on the carriers As, where (in the case 
that A is standard or N-standard) (ibool and dnat are the discrete metrics on B and N 
respectively, and such that the primitive functions on A are all continuous under these 
metrics. 

We will often write 'd' for the metric ds, and '^4' for the metric algebra {A, d). 
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Examples, (a) The metric algebra TZ'^ on the reals ("cf' for "distance") is defined by 



algebra 




import 




functions 


diVnat : IS 




Cereal • 



rfnat : ^ M, 

end 



where TZ is the N-standard algebra of reals (§1.4, Example (6)), divpat is division of reals 
by naturals (where division by zero is defined as zero), the metric on M is the standard 
one, and the metrics on N and B are discrete. 

Note that TZ"^ does not contain the (total) boolean-valued functions eqreal or lesSreab 
since they are not continuous with respect to this metric. 

(6) The interval metric algebra X'^: Here the unit interval / = [0, 1] is included as a 
separate carrier of sort 'intvl', again with the usual metric. This is useful for studying real 
continuous functions with compact domain. (We could also choose / = [—1, 1], etc.) The 
algebra X'^ is defined by 



algebra 


Id 


inn port 




carriers 


I 


functions 


6/ : / ^ M, 




C^intvl : — > M 


end 





where ij is the embedding of / into R. Because of the importance of the metric algebra T 
as in our computation theory, let us review its construction. It contains M with its standard 
ring operations, N and B with their standard operations, functions for definition by cases 
on R, N and B, division of reals by naturals, the unit line interval I and its embedding in 
R, and the standard metrics on all four carriers. 



6.2 Definitions and theorems 

Now let A be an N-standard metric Z'-algebra with metric d. 

Definition 1 (/xPR* computably approximable functions). A total function / : 
As on A is /xPR* computably approximable, uniformly on A, if there is a total 
//PR* computable function 

G : N X A" ^ As 

and a total computable function (7 : N ^ N on A such that, putting Gn =df G{n, ■ ), the 
sequence Gn approximates f uniformly on with modulus of approximation g, i.e., for 
all n, k and all x E A^, 

k>g{n) =^ d{Gk{x)J{x)) < 2"". 
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Definition 2 (Fast /itPR* computably approximable functions). A total function 
/ : As on A is fast fiPR* computably approximable, uniformly on A, if there is a total 

//PR* computable function G : N x A'^ Ag on A such that, putting Gn =df G{n, ■ ), 
the sequence Gn approximates f uniformly fast on A", i.e., for all n and all x e A^, 

d{Gn{x)J{x)) < 2-". (*) 

Remark 1. It is easy to see that Definitions 1 and 2 are equivalent; for given a (com- 
putable) approximating sequence G^ with modulus of approximation g, we can effectively 
replace it by the fast (computable) approximating sequence G'^ —df Gn og. We will there- 
fore usually tacitly assume w.l.o.g. that our approximating sequences are fast, and work 
with the (simpler) Definition 2. 

Definition 3 (Fast /xPR* approximating derivations). Let ^4 be a metric i7-algebra. 
A derivation 7 : nat x m — > s is an approximating derivation for a total function / : A'^ — > 
As if (i) the function G : N x A'^ ^ Ag computed by 7 on ^ is total on A; and (n) G 
and / satisfy (*) above. 

Note that at most one function is //PR* approximable by a given derivation on any 
metric algebra. 

Definition 4 (Conditional equation or inequality). 

(a) A conditional equation or inequality is defined like a conditional equation, except that 
the atomic statements may be either equations {ti = t2) between terms of the same sort, 
or order {t\ < ^2) between terms of sort real. 

(b) A conditional BU equation or inequality is defined like a conditional equation, ex- 
cept that the atomic statements may be either equations {ti = t2) or BU equations 
(Vz < t[ti = t2]) between terms of the same sort, or inequalities {ti < ^2) between 
terms of sort real. 

Remark 2. Here we are treating the order relation on the reals as a new atomic predicate 
of Lang{S*) (like equality), not as a boolean- valued operation 

lesSreal '■ ''eaP — > bool. 

This predicate (unlike such an operation) does not form part of the signature E. (See the 
analogous Remark concerning equality at the beginning of Section 2.) 

Note also that (*) is a conditional inequality (actually a simple inequality, without an 
antecedent). 

Notation. We write jjLPBj^-Approx^A) for the class of /tPR* computably approximable 
functions on A, and iJiPW-Approx{A)u^s for those of type u ^ s. 

In preparation for the next theorem, we note that a "Universal Function Theorem" 
holds for ^V^*-Approx{A), in the following sense. For any iJ-function type u ^ s, let 

i/"'^ =af Unit4,,^^^, : NxNxA^ ^ As 
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be the universal function for //PR*(A)natxM^s given by the Universal Function Theorem 
(§4.4). Then for each / e iJ,PR*-Approx{A)u->ai there is a number k such that (writing 
^k'n ~ H'^''^{k,n, ■ )) the sequence of functions H^'q, H^'i, H^'^i ■ ■ • uniformly approxi- 
mates /. The number k can be chosen as the Godel number of an approximating derivation 
for /, i.e., a derivation 7: nat x u — > s of the function H'^'^{k, ■ ). Combining this with 
Theorem 3 of Section 5, we obtain: 

Theorem 1 (Universal conditional BU specification of /xPR* approximable 
functions). For each U-function type u ^ s we can effectively find a signature ^ 
which expands S* by function symbols, and a finite conditional BU specification (i^^ g, 
F^g(z)) consisting of conditional BU equations and inequalities, which is universal for 
specifications of /iPR* {E)-computably approximable functions of that type, in the fol- 
lowing sense: it contains a distinguished number variable z such that for each fiPR*{U) 
derivation 7: nat x u ^ s and each metric S-algebra A and total function f : A^ — > As, 
if 7 is an approximating derivation for f on A, then {^^,8^ ^u,s(^))> where k = '"7"', 
specifies f on A, with hidden sorts and functions. 

Proof: Define 

F^Jz) =df F„^,(z)+i?invexp + i?*(z) 

where F^^{z) is the conditional BU equational specification constructed as in Theo- 
rem 3 in Section 5 for the universal function H for //PR* computable functions of type 
nat X It — > s, -Einvexp is the set of specifying equations for the computable real- valued 
function invexp(n) = 2~", i.e., its recursive definition: 

invexp(O) = 1, invexp(Sn) = divnat(invexp(n), 2), 

and E^{z) is the inequality (*) above — or rather, its formal version 

d(H(z, n, x), f(x)) < invexp(n). (**) 

(Note that every //PR* function G : N x A" — > is obtainable from H by substituting the 
Godel number of its derivation for the first argument z of H.) Let i7* ^ be the signature 
formed by expanding E* by symbols for H and invexp, as well as the auxiliary functions 
used in their computations. Then for any /tPR* derivation 7: nat x u ^ s, metric S- 
algebra A and function /: N x A^ ^ As, if 7 is an approximating derivation for / then 
(i7* g, F^^si^)) (where k = '"7"') is a conditional BU specification of / on A, with hidden 
sorts and functions, consisting of conditional BU equations and inequalities □ 

Now, by adapting the BU Reduction Theorem (§3.3) to specifications with inequalities, 
we derive as a corollary to Theorem 1: 
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Theorem 2 (Universal conditional specification of /uPR* approximable func- 
tions). For each E-function type u ^ s we can effectively find a signature Z'*'^ wliicli 
expands Z"* ^ (of Theorem 1) by function symbols, and a finite conditional specification 
£'^g(z)), consisting of conditional equations and inequalities, which is universal 
for specifications of approximably fiPR* {S)-computable functions of that type, in the fol- 
lowing sense: it contains a distinguished number variable z such that for each ijlPR*{S) 
derivation 7: nat x u ^ s and each metric E -algebra A and total function f : ^ As, 
if 7 is an approximating derivation for f on A, then (Z^'^, E^g{k)), where k = '"7"', 
specifies f on A, with hidden sorts and functions. 

Remark 3 (Replacing the order predicate by a boolean- valued operation). The 

order relation in the above specification is used in one place only: in the (conditional) 
relation (*) (or (**)). In fact (Remark 2 above notwithstanding) (*) could be interpreted 
as a conditional equation (so that / is conditionally equationally definable with hidden 
sorts and functions) by interpreting 'ti <t2 as 'lesSreal(^i) ^2) = true', where the boolean- 
valued operator 

lesSreai : reaP bool 

is included in the signature of the metric algebra over R. The problem here is that (as 
discussed in [TZ99]) whereas all functions in the signature of metric algebras (and hence 
all functions computable over these) are continuous., the (total) function less^eal is dis- 
continuous. The only way to restore continuity is to consider a partial continuous lesSreal 
operator, which leads to a study of topological partial algebras. This can be done, and the 
whole of the present theory could be re-cast in such a context, but that would take us too 
far afield from the present study. 

Let us apply Theorem 2 to the classical notion of Gzegorczyk-Lacombe ( GL) computabil- 
ity on the unit interval / = [0, 1]. This includes all the well-know functions of real analysis 
(sin, exp, log, etc.) restricted to /. 

Notation. We write GL^(/) for the class of GL-computable total functions /: /™ ^ M. 

Many concrete models of computation on I are equivalent to this class [PER89, WeiOO]. 
It has been shown that (recall the definition of X'^ in Example (6)): 

GL^(/) = /xPR*-Approa^(X")intvr^reai- 

(For details, see [TZ99, §9], [TZOO, §5.9].) Hence, again, a kind of "Universal Function 
Theorem" holds for GL5^(/), in the following sense. For m = 1, 2, . . . , let 

=,f t/m^;^;xintvr^real : N X N X /"^ ^ M 

be the universal function for /iPR*(X'^)natxintvl"'^real given by the Universal Function 
Theorem (§4.4). Then for each / G GL5^(/), there is a number k, effectively obtainable 
from the GL-code for /, such that (writing HJ!^^ = H'^{k,n, ■ )) the sequence of functions 
i/^Q, H'^^, • ■ ■ uniformly approximates / on /. 
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So by Theorem 2 applied to X"^: 

Theorem 3 (Universal specification of GL computable functions). For each 

m > there is a signature E*^ which is an expansion of E{X'^Y hnitely many func- 
tion symbols, and a Gnite conditional specihcation {S^, (z)) consisting of conditional 
equations and inequalities, which is universal for specifications of GL^(/), in the follow- 
ing sense: it contains a distinguished natural number variable z such that each function 
f G GL^(/) is specified (with hidden sorts and functions) by a suitable substitution in- 
stance {S^, (k)), where k can be found effectively from a GL-code for f. 

Remark 4 (Description of the signature of Theorem 3). The signature U'^ 

is an expansion of S{X'^) (for a description of which see the remark at the end of §6.1) by 
the following sorts and functions: 

[i) the sorts and functions of the array structure over X"^ (§1-6); 

{ii) the //PR* "universal function" F"* for GL'^{I) (as described in the above discussion) 
together with the auxiliary functions in its derivation; 

{Hi) the function 2~", used for assertions about computable approximations, as explained 
in the proof of Theorem 1; 

{iv) the characteristic function for BU quantification, as described in the proof of the BU 
elimination theorem (§3.3). 

Note that there is only one function of type {iv) in Z"^, namely that obtained by eliminating 
the conditional BU equation (§5-2) specifying the (single!) /U-operator occurrence in 
the /uPR* derivation for in {ii) (see Remark 1 in §4.4). (There are no conditional BU 
equality axioms for arrays (§3.2) to eliminate here, since real and intvl are not equality 
sorts.) 

6.3 Illustration: Specification of dynamical system 

We illustrate the connection between algebraic specification methods and models of phys- 
ical systems. 

A deterministic dynamical system with finite dimensional state space S C R"' and time 
T C R is represented in a model by a function 

0: TxS S 

where for t eT, s E S, (f){t, s) is the state of the system at time t with initial state s. For 
example, the state of a particle in motion is represented by position and velocity. Thus, 
for a system of n particles in 3-dimensional space, the state space has 6n dimensions. 

In practice, the model is specified by ordinary differential equations (ODEs) whose 
complete solution is (j). Specifically, in the modern qualitative theory of ODEs [Arn73] , 
is differ entiable, and the function (f)t : S ^ S defined by 

(f)t{s) — 4>{t, s) for t e T, s e S, 
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is a 1-parameter group of diffeomorphisms of S; the action of this group on S is called the 
flow on the phase space S. This flow can be specified by a vector field on S. 

In modelling a physical system, one aim is to compute values of the function (f) on 

sonic time interval and subspace of the space of initial conditions. Many methods exist to 
derive algorithms for (p from the equations that define it. Indeed, various fields of applied 
mathematics exist in order to design such equations, and the field of numerical analysis 
exists to design such solution methods. 

Conversely, we suppose that (f) can be simulated on a digital computer, i.e., (j) is a 
classically computable {e.g., GL-computable) function. Assume also that the state space 
S is the unit n-cube , and the time dimension T is the unit interval I. Thus 

(f): ixr I. 

We can now apply Theorem 3 to show that the dynamical system has a finite algebraic 
specification. 

Theorem 4 (Universal specification of computable dynamical systems). For each 
n > there is a signature which extends E{X^)* by function symbols, and a finite 
conditional speciEcation {S^, £'^(z)) consisting of conditional equations and inequalities, 
which is universal for all classically computable dynamical systems on the unit n-cube 
over the unit time interval I. 

Note that is essentially the signature of Theorem 3, with n = m + 1. 

We have shown above how powerful algebraic specifications are, even for topological data 
types. More research needs to be done to determine the extent of its power, especially on 
metric algebras. Here topological notions such as continuity can play a part, as we see 
from the following example. 

6.4 Example: Specification of function assuming continuity 

Consider the two equations for a (total) function / on the real line: 

fix + y) = f{x)xf{y), /(I) = c (*) 

for some constant c > 0. If we assume that / is continuous, even at one point, then it is 
easy to see that these equations are satisfied uniquely by the function 

fix) = c\ 

However, in the absence of any such continuity assumption, it can be shown that (for any 
c > 0) there are 2^ ° non-constructive solutions to (*). Here "non-constructive" means 
both that these solutions are non-computable, and that their existence is proved by non- 
constructive means, using Zorn's Lemma to show the existence of a Hamel basis on R, 
i.e., a maximal linear independent subset of M over Q. 

Note that any solution / of (*) is a homomorphism from the additive group of reals to 
the multiplicative group of positive reals. 
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This example suggests the following 

Question. On metric algebras, docs conditional cc^uational speciGability, together with a 
topological condition such as continuity, imply computability? 

Specifically, is there a continuous function on / which is definable by equations but not 
approximably computable? 

Note, in this connection, that there are other "equational specifications" for the expo- 
nential function e*: 

(1) the differential equation f'{x) = f{x) with initial condition /(O) = 1; 

(2) from the polynomial approximations given by the partial sums of the Maclaurin ex- 
pansion Xli^o h'^-i ^ specification consisting of conditional equations and inequal- 
ities can be derived by the methods of this section for approximating computations; 

(3) similarly, from the polynomial approximations, (1 + a specification consisting 
of conditional equations and inequalities can be derived. 

Note that in the first of these specifications, differentiability of / is (of course) implicitly 
assumed, and uniqueness of the solution follows by the Lipschitz condition; however no 
assumptions of continuity are needed in (2) or (3). 

The above question points to an open field of research. The investigation of computable 
solutions of recursive equations in [GHOO] would be relevant here. 

7 Initial algebra specifications with conditional equations and 
conditional BU equations 

In this section we will consider theories T, which we assume to be formalised in logical 
formalisms T of the kind described in Section 2; for example, T = CondBUEq(Z'). 

7.1 Pre-initial and initial models 

In this subsection (only), we make no assumptions concerning the (N-)standardness of 
signatures or algebras. Let E he a, signature and let IK be a Z'-adt. 

A formalism JF is said to be valid for IK if the axioms and inference rules of hold for 
all algebras in K. Note, for example, that CondBUEq(Z') is valid for NStdAlg {U), but 
not, in general, for Alg{E). 

A Z'-algebra A is pre-initial for K if there is a unique Z'-homomorphism from A to 
every algebra in K; ^jre-initial in that it might not itself belong to K. (The notion of 
E-homomorphism between Z'-algebras is defined as usual [MT92].) 

Note that the closed term algebra T{E) is pre-initial for K. 

An initial algebra o/ IK is a pre-initial algebra which belongs to K. As is easily seen, 
any two initial algebras of K must be Z'-isomorphic. We denote any initial algebra of K 
by /mt(r,K). 
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We will be interested in the case that 

K = Alg{E,T), 

the class of models of a first-order i7-theory T, where T may have certain syntactic re- 
strictions. We will assume: 

• in this subsection that T is a conditional equational theory; 

• in §7.2 likewise, but restrict attention to N-standard models of T; 

• in §7.3 that T is a conditional BU equational theory (again with N-standard models); 

• and in §7.4 that it is a conditional SU equational theory (ditto). 

(Recall the formal systems defined in Section 2.) Finally in §7.5 we will show how condi- 
tional BU equational initial algebra specifications can be "reduced" to conditional equa- 
tional initial algebra specifications. 

Let T be a Z'-theory. We write Init{E,T)ior the initial algebra Init(^U , Alg{E , T)) 
(if it exists), and call it the initial model ofT. 

Consider the closed term algebra T{E, T, T) formed from T{E) by identifying closed 
terms provably equal from T, in some formalism .F, i.e., 

T{E,T,T) =df T{S)/^t,:f 

where 

ti^T,j^t2 "^^df ti = t2 is provable from T in J^. 

Lemma. If is valid for Alg{E, T), then T{E, T, T) is pre-initial for Alg{E, T). 

We will investigate whether T{S,T,T) is, further, initial for Alg{S,T), i.e., whether 

T{E,T,T) = Init{E,T). 

Initiality Lemma. Suppose T is valid for Alg{E,T). If T{E,T,J^) e Alg{E,T), then 
it is (E -isomorphic to) Init{E,T). 

Definitions. Let A be a i7-algebra. 

(1) A has an initial algebra specification {E,T) if A = Init(E,T). 

(2) A has an initial algebra specification with hidden sorts and/or functions {E' , T') if 
E' is an expansion of E by sorts and/or functions, T' is a i7'-theory and 

A ^ Init{E, Alg{E',T')\E). 
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Theorem 1 [Mal73]. Let E be a conditional equational theory over E. Let I =df 
r(Z', CondEq(Z')). Then I is an initial model of E. Furthermore, if ti,t2 are two 
closed E-terms of the same sort, then the following are equivalent: 

(i ) ti and t2 have the same value in I, 

(ii ) ti and t2 have the same value in all models of E, 

(in) ti = t2 is provable from E in CondEq(Z'), 

(iv) ti = t2 is provable from E in fOL{S). 

Proof: The main thing here is to show that / |= E, from which (n)=^(i) wiU foUow. Since 
/ is a (closed) term model, it is sufficient to show that / satisfies all closed substitution 
instances of the axioms of E. So consider any closed instance Pi A . . . A P„ — > P of an 
axiom of E, where Pi and P are closed equations. Note that the corresponding sequent 

Pi,...,P„^P (*) 

is derivable from E in CondEq(Z'), by the substitution rule. Suppose I \= Pi for 
i = 1, . . . , n. Then, by the definition of /, Pi is provable from E in CondEq(Z'). But then 
P is also provable, by repeated (atomic) cuts of the sequent (*) with the sequents i — > Pi, 
and so / |= P. 

Hence / |= E. It follows, by the Initiality Lemma, that / is an initial model of E. 
Hence also {ii)^{i). The further implications {i)^{iii)^{iv)^{ii) are all trivial. □ 

Remark (Completeness and conservativity). Mal'cev's Theorem [Mal73], in the 
form given above, can be viewed as expressing both (a) completeness of CondEq(Z'), 
given by the implication (ii) =^ {Hi), and (6) conservativity of first order logic with 
equality over CondEq(Z'), given by the implication (iv) =^ (Hi). {Cf. conservativity 
lemma (1) and the remark in §2.6.) 

Necessary and sufficient conditions for the existence of initial models of theories are 
given in [MM84] . 

7.2 Initial N-standard models 

Assume, from now on, that U is N-standard, and that K consists of N-standard Z'-algebras; 
for example, K = NStdAlg{S,T), for some Z'-theory T. Then T{S,T,J-'), although 
it is pre-initial for K, might fail to be initial for K for two reasons: it might not satisfy T, 
and it might not even be N-standard! (We return to the second point below.) 

An initial N-standard model of T is an initial algebra of NStdAlg{U,T). Any two 
initial N-standard models of T are Z'-isomorphic. We denote any such model by 

InitNStdAlg{E,T) =df Init{E, NStdAlg{E,T)). 

N-Standard Initiality Lemma. Suppose T is valid for NStdAlg{E, T). 

If T{E,T,J^) e NStdAlg{E,T) then it is (E-isomorphic to) InitNStdAlg{E,T). 
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Definitions. Let A be an N-standard Z'-algebra. 

(1) A hsiS 3,11 initial N-standard algebra specification {U,T) if A = InitNStdAlg{E,T). 

(2) A has an initial N-standard algebra specification with hidden sorts and/ or functions 
{S' ,T') if E' is an expansion of E by sorts and/or functions, T' is a Z''-theory and 

A ^ Init{E, NStdAlg{E',T')\^). 

Note that InitNStdAlg{U,T) (if it exists) might not be an initial model of T, i.e., T 
might have another, non-N-standard, initial model, as the following example demonstrates. 

Example (Initial N-standard model of a theory which is not an initial model 
of that theory). Let S contain (in addition to the standard operations on nat and bool) 
a constant u : bool, and let T contain the single axiom 'u 7^ true'. Then the term algebra 
T{IJ) trivially satisfies T, and is hence (by the Initiality Lemma of §7.1) an initial model 
of T. It is not N-standard, since it has a 3-element carrier of sort bool, with distinct 
denotations of true, false and u. There is, however, also an initial N-standard model of T 
with an N-standard (2-element) carrier of sort bool, formed by identifying li and false. 

Now T{E, T, J^) may fail to be N-standard for two reasons: that T proves "too little" 
or "too much", roughly speaking. The first reason is connected with non-N-standard 
interpretations of the sorts nat and bool. Thus, there may be a function symbol f in S 
with range sort nat, without corresponding axioms in T capable of "reducing" f{t), for 
some closed term t, to a numeral. Similarly (as in the above example), not all closed 
boolean terms {i.e., terms of sort bool) may be (provably in T) equal to true or false. (In 
the terminology of [GH78] the specification {S,T) is not "sufficiently complete".) The 
second reason is that T may be inconsistent, in the sense that it proves 'true = false' (or, 
equivalently in a suitable weak background theory, '0 = 1'). This motivates the following 
definitions. Note that we must (to begin with) speak of provability relative to some formal 
system J^, which will typically be one of the system CondEq(Z') or CondBUEq(Z') of 
Section 2. 

Definition 3. T is consistent in T if the equation 'true = false' is not provable in T from 
T. 

Definition 4. T determines nat in J-" if every closed term of sort nat is, provably in J-" 
from T, equal to a numeral; and T determines bool in if every closed term of sort bool 
is, provably in JF from T, equal to true or false. 
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Definition 5 (N-standardness axioms). 

(a) NStdAx(i7) is the following set of conditional equations: 

and(true, true) = true, and(true, false) = and(false, true) = and(false, false) = false, 
or(false, false) = false, or(true, true) = or(true, false) = or(false, true) = true, 
not(true) = false, not(false) = true, 
if5(true, xf,x^) = x^, ifs(false, xf , x|) = x^, 
eqnat(0, 0) = true, eqnat(Sz, 0) = eqnat(0, Sz) = false, 
eqnat(Szi, Sz2) = eqnat(zi, Z2), 
lessnat(0, Sz) = true, lessnat(z, 0) = false, 

leSSnat(Szi, SZ2) = leSSnat(zi, Z2), 

eqs(x*, x'^) = true, 
eq,(x^,x^) = true ^ tl =4- 

where, in the axioms for ifg, s ranges over all i7-sorts other than bool; and in the axioms 
for eqs, s ranges over all E- equality sorts other than nat, 

(6) NStdAxo(i^) is the set of all closed S -substitution instances of NStdAx(i7). 

Note that NStdAx(Z') + Ind(Z') holds in any N-standard Z'-algebra. 

We use the terminology: T proves NStdAxo(i^) in T to mean: NStdAxo(l^) is derivable 
from T in T . 

We now state some lemmas which give sufficient conditions for a term model T(Z', T, 
to be N-standard. 

Lemma 1 (N-standardness lemma) . Suppose that in T 
(i) T is consistent, 

(a) T determines nat and bool, and 
(Hi) T proves NStdAxo(r). 

Then T{E,T,T) is N-standard. 

Lemma 2. If E is strictly N-standard then NStdAxo(l^) determines nat and bool in 
CondEq(r). 

Proof: By structural induction on all closed i7-terms of sort nat and bool (simultaneous- 

ly). □ 

The following is an immediate consequence of Lemmas 1 and 2. 
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Lemma 3 (Strict N-standardness lemma). Suppose E is strictly N-standard, T is 
at least as strong as CondEq(Z'), and in T 

(i) T is consistent, and 

(n) T proves NStdAxo(r) (or NStdAx(r);. 

Then T{E,T,T) is N-standard. 

7.3 Conditional equational theories 

We now give the analogue of Mal'cev's Theorem (§7.1) for N-standard models of condi- 
tional equational theories. 

Theorem 2. Let E be a conditional equational theory over E. Suppose that in 
CondEq(Z'), E is consistent, determines nat and bool, and proves NStdAxo(X'). Then 
I =df T{IJ, E, CondEq(Z')) is an initial N-standard model of E. Furthermore, if ti,t2 
are two closed E-terms of the same sort, then the following are equivalent: 

(i ) ti and t2 have the same value in I, 

(a) ti and t2 have the same value in all N-standard models of E, 

(iii) ti = t2 is provable from E in CondEq(Z'), 

(iv) ti = t2 is provable from E in FOL(Z') + Ind(Z'). 

Proof: By the N-standardness Lemma (§7.2), / is an N-standard algebra. As in Theorem 
1, the main thing is to show that I \= E. This is done exactly as in the proof of Theorem 
1. It follows, by the N-standard Initiality Lemma (§7.2), that / is an initial N-standard 
model of E. The rest of the proof is similar to that for Theorem 1. Note for the implication 
{iv)=^{ii), we use the fact that the rule Ind(Z') is valid for N-standard Z'-algebras. □ 

Remarks. (1) By Lemma 2 in §7.2, the assumption in the theorem that E determines 
nat and bool can be replaced by the assumption that E is strictly N-standard. 

(2) {Completeness and conservativity.) Here again, the implication {ii)=>-{iii) can be 
construed as a completeness theorem, and {iv)^{iii) as a conservativity theorem. (See 
the Remark in §2.6 and the Remark following Theorem 1.) 

(3) {The N-standardness axioms.) We have "incorporated" the N-standardness axioms 
NStdAxo(i7) in the theory E, so to speak, by assuming that E proves them. Another 
feasible approach would be to incorporate these axioms in the logics CondEq, CondBUEq 
and FOL, by adding them as axioms (as we did with the boundedness axioms BddAx in 
CondBUEq). This would entail some minor re-wording of the theorems. 

We turn our attention to theories with syntactic structure more complicated than con- 
ditional equations. 
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7.4 Conditional BU equational theories 

We give the analogue of Mal'cev's Theorem for N-standard models of BU conditional 
equational theories. 

Theorem 3. Let F be a conditional BU equational theory over S. Suppose that in 
CondBUEq(Z'), F is consistent, determines nat and bool and proves NStdAxo(i^). Then 
I —df T{S, F, CondBUEq(Z')) is an initial N-standard model ofF. Furthermore, if ti,t2 
are two closed E-terms of the same sort, then the following are equivalent: 

(i ) ti and t2 have the same value in I, 

(a) ti and t2 have the same value in all N-standard models of F, 

(iii) ti = t2 is provable from F in CondBUEq(Z'), 

(iv) ti = t2 is provable from F in FOL(r) + Ind(r). 

Proof: By the N-standardness Lemma, / is N-standard. As in Theorems 1 and 2, the 
main thing is to show that I \= F. Again, since / is a term model, it is sufficient to show 
that / satisfies the set of closed substitution instances of F. First note that, by definition, 
/ satisfies precisely all closed equations provable from F in CondBUEq, i.e., for any closed 
equation P: 

I\=P <(=^ Fh P (*) 

where 'h' here means provability in CondBUEq. Further, by use of the houndedness axioms 
BddAx of CondBUEq (§2.3), the same holds for any closed BU equation Q: 

I\=Q ^ F\-Q. (**) 

For suppose Q = \/z < tP{z), where P{z) is an equation. Since / is N-standard, 

I\=t = n 

for some (unique) n. Then 

I\=yz< tP{z) <^ for all /c < n, / h ^(^) 

<^ for all /c < n, F h P{k) by (*) 
<S=^ F h Vz < tP{z) by BddAx and (***). 

Now consider any closed instance / = Qi A . . . A Qm ^ Q of an axiom of F (where 
Qi and Q are closed SU equations). Suppose I \— Qi for z = 1, . . . , m. Then by (**) 
Qi is provable from F in CondBUEq. But then so is Q, by repeated cuts of the sequent 
Qi, ■ ■ ■ , Qm ' — Q corresponding to / with the sequents i — > Qi, and so / ^ Q. □ 

Remarks. (1) As before, the assumption in the theorem that F determines nat and bool 
can be replaced by the assumption that U is strictly N-standard. 

(2) {Completeness and conservativity.) Again, the implication {ii)=>{iii) can be con- 
strued as a completeness theorem, and {ii)=^{iii) as a conservativity theorem. 
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7.5 Conditional SU equational theories 

Now we turn to the infinitary conditional SU equational logic (§2.4). Although it will not 
be used further in the paper, it is interesting in its own right. 

Remember that the infinitary w-rule V^^i? obviates the need for an induction rule. 

Theorem 4. Let G be a conditional SU equational theory over S. Suppose that in 
CondSUEqt^(Z'), G is consistent, determines nat and bool and proves NStdAxo(i^). Then 
I =df T{U, G, CondSUEqt^(Z')) is an initial N-standard model of G. Furthermore, if 
ti, t2 are two closed S-terms of the same sort, then the following are equivalent: 

(i ) ti and t2 have the same value in I, 

(a ) ti and t2 have the same value in all N-standard models of G, 
(Hi) ti = t2 is provable from G in CondSUEqt^(Z'), 
(iv) ti = t2 is provable from G in FOL<^(Z'). 

Proof: By the N-standardness Lemma, / is N-standard. Again, the main thing is to show 
that / satisfies closed substitution instances of axioms of G. By definition, for any closed 
equation P: 

I ^ P ^ Gh P (*) 

where 'h' here means provability in CondSUEqj^. Further, by use of the Vj^i? rule, the 
same holds for any closed SU equation R: 

I^R ^ G\-R. 

For suppose R = VzP(z), where P{z) is an equation. Then 

/ \= VzP(z) « for all n, / |= P{n) 

^ for aU n, G h P(n) by (*) 
^ G hVzP(z) by V^i? 

The rest of the proof follows the pattern of Theorems 1, 2 and 3. □ 

Remarks. (1) As before, the assumption in the theorem that G determines nat and bool 
can be replaced by the assumption that E is strictly N-standard. 

(2) (Completeness and conservativity.) Once again, the implication (n)^(iii) can be 
viewed as a completeness theorem, and (iv)^(iii) as a conservativity theorem. 

7.6 Open term algebras 

So far (Theorems 1, 2, 3 and 4) we have concentrated on closed term algebras. We could 
also formulate our results in a more general setting, namely, with term algebras constructed 
from open terms, i.e., terms containing free variables (from a given set X). 
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The problem here is that with open terms (an analogy of) the N-Standardness Lemma 
(§7.2) will fail in general. However, under a certain syntactic condition (the "N-term 
condition" below), a version of this Lemma can still be formulated. 

First we need some definitions and notation. Given a signature S, and a set X C 
Var(Z'), let T{IJ, X) be the set of Z'-terms in X , i.e., Z'-terms containing variables from 
X only. In particular, for X = 0, wc have the set of closed Z'-terms T{U) = T{U, 0). 

Given a first-order Z'-theory T and formalism which is valid for Alg{U,T), let 
T{U, X, T, J^) be the S-term algebra formed from T[E, X) by identifying terms provably 
equal from T in T. (The closed term algebra T{E,T, JF) considered above corresponds 
to the special case X = 0). 

The algebra / =df T{E,X, T, J^) is free for T over X. This means that for every model 
A of T, and every assignment p : X ^ A of elements of A to variables in X (of the same 
sort), there is a unique U -homomorphism h : I ^ A such that h \ Xp. (This reduces to 
initiality in Alg{S, T) when X = 0.) 

Note that / need not itself be a model of T. However, this will be the case, provided 
T satisfies certain syntactic conditions {e.g., if T is a conditional equational theory; of. 
Theorem 1 above). 

Again, assuming that U is N-standard, we are interested in the question whether / is 
N-standard. A useful criterion in this connection is the following syntactic condition on E 
and X: 

N-term Condition for [U,X). No U-term of sort nat or bool contains any variables 
from X. 

Remarks. (1) The N-term condition for {E,X) is trivially satisfied when X = 0. 
(2) When E is strictly N-standard, it is equivalent to the condition: 

there are no variables in X of sort nat or bool. 

This follows from Remark 3 in §1.5. 

Now the theory given above, and specifically Theorems 1 to 4, can be generalised to the 
case of open term models T{E, X, T, JF) , where {E, X) satisfies the N-term condition. 
First, the N-standardness lemma becomes: 

N-Standardness Lemma^. Suppose that {U,X) satisB.es the N-term condition. 
Suppose further that in T 

(i) T is consistent, 

(a) T determines nat and bool, and 

(in) T proves NStdAxo(^). 

Then T{E,X,T,T) is N-standard. 

Next, the strict N-standardness lemma becomes (using Remark 2 above): 
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Strict N-Standardness Lemma . Suppose S is strictly N-standard, and there are no 
variables in X of sort nat or bool. Suppose also T is at least as strong as CondEq(Z'), 
and in T 

(i) T is consistent, and 

(a) T proves NStdAx(r). 

Then T{U,X,T,J^) is N-standard. 

Consider next, for example, Theorem 2. This can be reformulated as follows. 

Theorem 2^. Suppose {S,X) satisB.es the N-term condition. Let E be a conditional 
equational theory over E. Suppose that in CondEq(Z'), E is consistent, determines nat 
and bool, and proves NStdAx(Z'). Then I =df r(r, X, CondEq(Z')) is an N-standard 
model of E, which is free for E over X . Furthermore, if ^1,^2 S'^e two terms in T{S, X) 
of the same sort, then the following are equivalent: 

(i) ti and t2 have the same value in I, 

(ii ) ti and t2 have the same value in all N-standard models of E, 
(Hi) t\ = t2 is provable from E in CondEq(Z'), 
(iv) ti = t2 is provable from E in FOL(Z') + Ind(Z'). 

The strict N-standardness Lemma'''-, and Theorem 2-^ , will be used in Section 9. 

7.7 Reducing conditional BU to conditional equational specifications 

We re-consider the work of §3.3 from the viewpoint of initial algebra specifications. 

Theorem 5 (BU elimination for initial algebra specifications). Let F be a 

conditional BU equational theory over E. Then there is an expansion E' of E and a 
conditional equational theory E' over E' which is equivalent to F (relative to N-standard 
models) in the sense that: 

(i ) if A is an N-standard E-model of F, then it has a E' -expansion which is a N-standard 
model of E' ; 

(ii) if A = InitNStdAlg{E, F) then it has a unique (up to E' /E -isomorphism) E'- 
expansion A' such that A' ^ InitNStdAlg{E' , E'); 

(Hi) if A' is an N-standard E' -model of E' , then its E-reduct A is an N-standard model 
ofF; and if A' ^ InitNStdAlg{E' , E') then A ^ InitNStdAlg{E, F). 

If F contains q occurrences of BU quantifiers, then E' expands E by one new sort and 
q new function symbols. Moreover, if F is finite, with e axioms (say), then so is E', with 
e + 4g axioms. 

Proof: The idea, again, is to incorporate in the signature, for each BU quantifier occurring 
in F, a characteristic function for that quantifier. The problem with adjoining a boolean- 
valued function symbol f : nat x u ^ bool satisfying (**) in the BU elimination theorem 
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in §3.3, is in the case that A is an initial N-standard model of F. In order that its E'- 
expansion A' be N-standard, the value of f(n, x) must be either true or false for every value 
of the arguments n, x. Furthermore, in order that A' also be initial, the Z'-homomorphism 
h from A to every N-standard model B of F must be extendible to a i^'-homomorphism 
h' from A' to the i7'-expansion B' of B. However, the rhs of (**) in §3.3 will hold "more 
often" in B than in A (since S is a homomorphic image of A) , with a corresponding change 
in the value of f(n, x) from false to true! Hence h cannot, in general, be extended as desired. 
(Making f a 0,1- valued function will cause exactly the same problem.) 

We therefore adjoin a special sort D for the range of such functions f, with a constant 
d which takes the place of 'true' in (**) in §3.3. (The point is that when the condition on 
the rhs of (**) fails, f(?i, x) is not "forced" to equal anything else at all.) Now for each BU 
quantifier as in (*) of §3.3, adjoin to the signature the function symbol 

f : nat X M D, 

and adjoin the axioms formed from (***) and (****) in §3.3 by replacing 'true' by 'd' 
throughout. In this way we replace F by a conditional equational theory E' in U' , with 
the stated properties. □ 

Remark. If A is an N-standard model of F, then its N-standard i^'-expansion A' mod- 
elling E', given by part (i) of the theorem, is not (in general) uniquely determined. How- 
ever, the added condition of initiality (on A and A') determines A' uniquely. 

8 Initiality-preserving operators on N-standard algebras 

In this section we combine the theory of Section 5 ( "computability algebraic speci- 
fiability" ) with the initial algebra theory of Section 7. 

8.1 Initiality preserving operators and the HEP 

Assume now (as in §3.1) that E' and E" are N-standard signatures with E C S' C 
E", and $ : NStdAlg (E) NStdAlg{E') is an expanding operator over E. Recall 
Definitions 5 and 7 in §3.1. 

Definition 1. $ is initiality preserving {w.r.t. E and E') iff for all K C NStdAlg (E) 
and A e NStdAlg (E), A is initial in K iff A^ is initial in K*. 

Lemma 1. Suppose $ is initiality preserving, and {E' , T') speciB.es $ uniformly over E. 
Then for any E-theory T and N-standard E-algebra A, 

A ^ InitNStdAlg{E, T) ^ A^ ^ InitNStdAlg{E' , T + T'). 
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Lemma 2. Suppose = ^'(A) | ^> for all A e NStdAlg (S), where 

* : NStdAlg {U) NStdAlg {S") 

is an expanding operator which is initiality preserving w.r.t. S and E" . Then $ is initiality 
preserving, and for any E"-theory T" and N-standard E-algebra A, if {E", T") specifies 
uniformly over E, then {E'\ T") specifies $ uniformly over E with hidden sorts and/or 
functions; and for any E-theory T and N-standard E-algebra A, 

A ^ InitNStdAlg {E,T) <^ yl* ^ InitNStdAlg (E", T + T") 

<^ A* ^ InitNStdAlg{E", T + T") \ ^> 

^ A^ ^ Init{E', NStdAlg{E", T + T") | ^/ ). 

Proof: Prom Lemma 1. □ 

Definition 2. $ has the homomorphism extension property (HEP) (w.r.t. E and E' ) 

iff every homomorphism h : A ^ B between N-standard Z'-algebras can be extended 
uniquely to a homomorphism h"^ : A* — > between their images under $. 

Lemma 3. If $ has the HEP, then $ is initiality preserving. 

We wiU apply the above theory to three cases: array specifications in §8.2, and specifi- 
cations for PR and //PR* computable functions in §8.3 and §8.4 respectively. 

8.2 Initial algebra specification of array algebras 

Recall the array specification {E*, ArrAx(Z')) defined in §3.2. 

Lemma 1. The array construction A A* (^1.6) has the HEP, and (hence) is initiality 
preserving. 

Lemma 2. For any N-standard E-algebra A and E-theory T: 

A ^ InitNStdAlg{E, T) ^ A* ^ InitNStdAlg {E* , T + ArrAx(i:)). 

Proof: By §8.1, Lemma 1, and §3.2, Theorem 1. □ 

Of particular interest is the case that T is a conditional BU equational theory: 

Theorem 1. If a E-algebra A has an initial N-standard algebra specification by a set of 
conditional BU equations, then so does A* . Moreover, if the specification for A is finite, 
with e axioms (say), then so is that for A* , with at most e + 8s axioms, where s is the 
number of sorts in E. 

Next, from the BU elimination theorem for initial algebras (Theorem 5 in Section 7) we 
can reduce such a specification for A* further to one with conditional equations only. 
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Theorem 2. If a S -algebra A has an initial N-standard algebra speciGcation by a set 
of conditional equations, then so does A* (with hidden sorts and functions). Moreover, if 
the speciGcation for A is Gnite, with e axioms (say), then so is that for A*, with at most 
e + 12s axioms, where s is the number of sorts in E. 

Proof: First apply Theorem 1 (or Lemma 2) above. Then replace the equality axiom 
for s* in ArrAx(Z'), which is a conditional BU Z'*-equation (§3.2), by a conditional E*- 
equation, for each Z'-equality sort s other than nat, by BU elimination (Theorem 5 in §7.7, 
applied to T*). □ 

8.3 Initial algebra specifications for PR computable functions 

Now we apply the above theory to the results in §5.1. 

Lemma 1. For each PR(E) derivation a, the operator {**) (^5.1) has the HEP, and is 
(therefore) initiality preserving. Hence the operator (*) is initiality preserving. 

Proof: By structural induction on a. □ 

Hence, by Theorem 1 in Section 5 and Lemma 2 in §8.1: 

Lemma 2. For each PR{E) derivation a, and for each N-standard E-algebra A and 
E -theory T: 

A ^ InitNStdAlg{E, T) <^ {A, g^, f^) ^ InitNStdAlg{E^, T + E^) 

^ {A, f^) ^ InitNStdAlg{Ea, T + E«) | 
<^ {A, f^) ^ Init{Ef, NStdAlg{Ea, T -\- E^) \ e^) . 

Here Ef = E U {fa}- (Remember, Eq, = E U {g^,fQ,}, where g^, is the list of auxiliary 
functions of a.) Of particular interest is the case that T is a conditional equational theory: 

Theorem 3. Let f be a PR function on a E-algebra A. If A has an initial N-standard 
algebra speciGcation by a set of conditional equations, then so does {A, /) (with hidden 
functions). 

8.4 Initial algebra specifications for /xPR* computable functions 

We turn to /xPR* computability (§5.2). The problem here (as noted in §5.2) is that 
even if the computed function is total, the auxiliary functions need not be. However, by 
applying the totality lemma (§5.2), we are able restrict our attention to total derivations. 

Lemma 1. For each ^PR*{E) derivation a and each N-standard E-algebra A on which 
f^ is total, the operator (***) (^5.2) has the HEP, and is (therefore) initiality preserving. 
Hence the operator (*) (%5.1) is initiality preserving. 

Proof: By structural induction on cu. □ 

Hence, by Theorem 2 in Section 5 and Lemma 2 in §8.1, we have: 
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Lemma 2. For each fiPR*{IJ) derivation a, each N-standard E-algebra A on which is 
total, and each E-theory T: 

InitNStdAlg{U,T) ^ 

{A, f^) ^ Init{2Jf, NStdAlg{El, T + ArrAx(i;) + F«) | 

where a is the total derivation for given by the totality lemma, and Fg, is the conditional 
BU speciGcation for a. 

Here, as before, = E U {fa}- Of particular interest are the two cases that T is a 
conditional BU equational theory, and a conditional equational theory. First, assuming the 
former: 

Theorem 4. Let f be a total jiPR* function on a E -algebra A. If A has an initial N- 
standard algebra specification {E,F), where F is a set of conditional BU equations, then 
likewise {A, f) has such a specification {Ef, F^) with hidden sorts and functions, where F^ 
is also a set of conditional BU equations. Moreover, F^ can be obtained by adjoining to F 
an instantiation F^ (k) of some universal conditional BU equational specification F^ (z), 
which depends only on E and the type of f. 

The universal specification F^ [z) in this theorem is obtained as in Theorem 3 in Section 

5. 

Finally, by assuming T in Lemma 2 is a conditional equational theory, and applying 
Theorem 4 above and then BU elimination for initial algebras (Theorem 5 in Section 7): 

Theorem 5. Let f be a total fiPR* function on a E -algebra A. If A has an initial 
N-standard algebra specification {E,E), where E is a set of conditional equations, then 
likewise {A, f) has such a speciGcation {E^, Ef) with hidden sorts and functions, where 
E^ is also a set of conditional equations. Moreover, E^ can be obtained by adjoining to 
E an instantiation E^ (k) of some universal conditional equational specification E^{z), 
which depends only on E and the type of f. 

9 Computability of algebraically specifiable functions 

In this section we prove (partial) converses to the results of Section 5. First we need a 
definition. 

Definition (Strong specifiability) . Let K be a Z'-class, let E' D E L) {f} and let T 
be a Z''-theory. We say that T strongly specifies a family { | ^ e K } (possibly with 
hidden sorts and/or functions) iff 

(i) T specifies { | A G K}, and further 

(ii) for every A,B eK with B ^ A, = \ B. 

(Here /"^ \ B denotes the restriction of /"^ to B.) 

The significance of this concept is seen by rephrasing it in either of the following two 
ways. 
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Lemma 1. Let K be a E -class, let E' ^ E U {f} and let T be a E' -theory. T strongly 

specifies a family | ^ e K} (possibly with hidden sorts and/or functions) iff 

(i) T specifies { | A G K}, and further 

(a') for every yl, S e K with B ^ A, B is closed under f^. 

Lemma 2. Let K be a E -class which is closed under finitely generated subalgebras, let 
E' ^ E U {f} and let T be a E' -theory. T strongly specifies a family { | ^ e K } 

(possibly with hidden sorts and/or functions) iff 
(i) T specifies { \ A E K}, and further 

(a") for every A G K and every finitely generated B ^ A, B is closed under /"^. 

We consider algebras and functions specified by conditional equational theories. We 
have to assume now that these theories have effective axiomatisations: that the axioms 
are finite, for example, or at least recursively enumerable. 

We will also make use of Theorem 2-^ in §7.6. Recall the remarks preceding the theorem 
there, that the N-term condition for {E, X) follows from either (z) X = 0; or (ii) strict 
N-standardness of E, together with X containing no variables of sort nat or bool. 

We will prove two theorems, making each of these assumptions in turn. 

9.1 Computability of specifiable function on minimal algebras 

We first consider a partial converse, using Remark 1 on the N-term condition (§7.6), 
that is, restricting our attention to minimal models {i.e., models in which every element is 
named by a closed term). We use the notation MinNStdAlg{E , T) for the set of minimal 
N-standard Z'-models of a theory T. 

Theorem 1. Suppose E is N-standard. Let E be an r.e. conditional equational E-theory 
which in CondEq(Z') is consistent, determines nat and bool and proves NStdAxo(l^). 
Suppose E' D E U {f}, and let E' be an r.e. conditional equational E'-theory which 
strongly specifies { /"^ | A G MinNStdAlg{E,E)} (possibly with hidden sorts and/or 
functions). Assume also that E + E' determines nat and bool, and is conservative over 
E, in CondEq(i7), and also that all sorts of dom{f) other than bool are equality sorts. 
Then is uniformly /iPR* computable over A G MinNStdAlg{E, E). 

Proof: We will describe a pseudo- While* {E) algorithm for computing uniformly over 
minimal N-standard I7-models A oi E. Suppose f : u ^ s, where u = si x ■ ■ ■ x Sn- In 
general, some of the Si are nat or bool, and the others not. Suppose (w.l.o.g.) that for 
some m < n, sorts Sm+i, ■ ■ ■ ,Sn are all either nat or bool, and sorts si, . . . , Sm are not. 
Write u = V X w where v = si x ■ ■ ■ x Sm and w = Sm+i x • • • x s„. By assumption, 
sorts Si, . . . ,Sm are equality sorts. 

For any A G MinNStdAlg{E , E), we will show how to compute 

fA, ^ As. 

Choose a tuple k = (fci, . . . , kn-m) e (of naturals and truth values), and consider the 
function 

=,f f{-,k): A- ^ As. 
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We will show how to compute uniformly in the (numerical and boolean) parameters k. 

Let / = r(r, E, CondEq(r)) and J = T{E' , E + E' , CondEq(r')) (recall the defi- 
nitions in §7.1). By the N-Standardness Lemma (and the conservativity assumption for 
E + E' over E), both / and J are N-standard. (Below we denote elements of these algebras 
by '[t]', i.e., suitable equivalence classes of terms t, or tuples thereof. We also write k for 
the tuple of numerals and/or truth constants corresponding to k.) 

Note that the identity mapping on T{U) induces a Z'-homomorphism 

Li : I J Is. 

By conservativity of E + E' over E, lj is injective. Hence / ^ J \ s- 

Further, the function /'^ specified by on J \ e is clearly the same as that defined 
"naturally" on J by /'^([t]) = [f(0]- By the strong specification assumption, 

f = f \I- 

Hence for any closed E -terra to, 

fkiM = fliM = [t] 

for some closed Z'-term t. By definition of J, this means that the equation 

f(to, k) = t (*) 

is ^>rova6/e from E + E' in CondEq(Z''). 

Now take any A e MinNStdAlg{E , E), and any a e A". Since A is minimal, there is 
a tuple of closed Z-terms to : v such that = a. By Theorem 2 of Section 6 applied to 
S' , there is a Z'-homomorphism 

h: J ^ iA,f^, ...) 

with /i([to]) = 0^- Hence, since (*) holds in J, it also holds in (the Z'-expansion of) A, 
with 'f interpreted as 

This suggests the following algorithm for with A minimal. With inputs a E A": 
first generate all (Godel numbers of) tuples of closed Z-terms of type f , until you find a 
tuple to with t-Q = a. (This is where we use computability of equality on type v.) Then 
generate all Godel numbers of theorems of E + E' until you find one of the form '~f(to) = f^, 
for some closed Z-term t. Then the output is t"^. 

The search is effective in the term evaluation function for closed Z-terms in A, by recur- 
sive enumerability of E and E' . Further, since term evaluation is PR* computable ([TZOO, 
§4]), this algorithm can be formalised as a /xPR*(i7) derivation for f^, as desired. □ 

Remark. The assumption that the sorts of dom{f) are equality sorts can clearly be 
weakened to the assumption that equality is (uniformly over MinNStdAlg(E, E)) com- 
putable on these sorts. 
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9.2 Computability of specifiable function in strictly N-standard algebras 

We consider a second partial converse, using Remark 2 on the N-term condition, i.e., no 
free variables of sort nat or bool, plus strict N-standardness. 

Theorem 2. Suppose U is strictly N-standard. Let E he an r.e. conditional equational 
S-theory which in CondEq(Z') is consistent and proves NStdAx(Z'). Suppose E' I) Z'Ujf} 
is also strictly N-standard and proves NStdAxfi^' j. Let E' he an r.e. conditional equational 
E' -theory which strongly specifies {f"^ \ Ae NStdAlg{S,E)} (possibly with hidden 
sorts and/or functions). Assume also that E -\- E' is conservative over E in CondEq('r'j. 
Then is uniformly fxPR* computable over A e NStdAlg{E, E). 

Proof: We will describe a pseudo- While* (E) algorithm for computing /"^ uniformly over 
A e NStdAlg{E, E). Suppose f : tt — > s, where tt = si x • • • x In general, some of 
the Si are nat or bool, and the others not. Suppose (w.l.o.g.) that for some m < n, sorts 
Sm+ii ■ ■ ■ ,Sn are all either nat or bool, and sorts si, . . . ,Sm are not. Write u — v x w 
where v = si x • ■ ■ x and w = Sm+i x ■ • ■ x Sn- 

For any A e NStdAlg{S, E), we will show how to compute 

Choose a tuple k = (/ci, . . . , kn-m) ^ ^™ (of naturals and truth values), and consider the 
function 

fk =df f{-,k): A^ ^ As. 
We will show how to compute uniformly in the (numerical and boolean) parameters k. 

Choose a tuple of variables x : v (i.e., of the same product type as a). Let / = 
r(r, X, E, CondEq(r)) and J = T{E' , x, E + E' , CondEq(r')) (recall the definitions in 
§7.6). By the strict N-standardness Lemma^ (§7-6), both / and J are N-standard. 

Note that the identity mapping on T{E, x) induces a Z'-homomorphism 

Li : I J\j:- 

By conservativity of E -\- E' over E, tj is injective. Hence I di J\ 

Further, the function /"^ specified by on J \ x: is clearly the same as that defined 
naturally on J by /"^{[t]) = [f(t)]. By the strong specification assumption, 

f = f \I. 

Hence 

for some t e T{E, x). By definition of J, this means that the equation 

f(x, k) = t (*) 
is proua^/e from E -\- E' in CondEq(Z''). 
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Now take any A e NStdAlg{E, E), and any a e A''. By Theorem 2^ applied to U', 
there is a Z''-homomorphism 

h: J ^ {A,f^, ...) 

where h{x) = a. Hence, since (*) holds in J, it also holds in (the ^''-expansion of) A, with 
'f interpreted as and a assigned to x. 

This suggests the following algorithm for f^. With inputs a E A": generate all Godel 
numbers of theorems of E + E' until you find one of the form '^f(x) = t"', for some Z'-term 
t (in x). This search is effective, by recursive enumerability of E and E' . Then the output 
is the evaluation of the term t in A with a assigned to x. 

Since term evaluation is PR* computable [TZOO, §4], this algorithm can be formalised 
as a /xPR*(Z') derivation for as desired. □ 

Remarks. 

(1) The above algorithm gives, for each tuple of numerical and boolean arguments k, a 
fixed term t e T{i:,x) as the value of /^(a) for aU A e NStdAlg{E,E) and aU 

a e A''. 

(2) Theorems similar to Theorems 1 and 2 can be formulated for conditional BU equa- 
tional theories and specifications, using a variation of Theorem 3 (instead of Theorem 
2) in Section 7. 

9.3 Significance of strong specifiability; Equivalence of specifiability and 
computability 

We want to combine some of the above results into an equivalence result between com- 
putability and specifiability. 

Note that by the Locahty Theorem for While computations [TZOO, §2.8], if / is /iPR* 
computable on an algebra A, then any subalgebra of A is closed under /. This suggests 
the following formulations for equivalence theorems, which are simple consequences of the 
above theorems and the lemmas on strong specifiability at the beginning of this section. 

We give one formulation (Theorem 3) for minimal algebras (c/. Theorem 1), and another 
(Theorem 4) for strictly N-standard algebras {of. Theorem 2). 

Theorem 3. Suppose U is N-standard. Let E be an r.e. conditional equational U-theory, 
which in CondEq(Z') is consistent, determines nat and bool and proves NStdAxo(X'). Let 
f = {fA\Ae MinNStdAlg{S, E)) be a family of functions on MinNStdAlg{S, E). 
Assume that all sorts of dom{f) other than bool are equality sorts. Then the following 
are equivalent: 

(i) f is fiPR* computable uniformly on MinNStdAlg{S, E); 

(ii) f is strongly specifiable uniformly on MinNStdAlg{E, E), with hidden sorts and 
functions, by a finite set of conditional equations which (together with E) is conser- 
vative over E in CondEq(Z'). 
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Theorem 4. Suppose E is strictly N-standard. Let E he an r.e. conditional equa- 
tional E-theory, which in CondEq(Z') is consistent and proves NStdAxo(l^). Let f = 
{f^\Ae NStdAlg{E,E)) be a family of functions on NStdAlg{E, E). Then the fol- 
lowing are equivalent: 

(i) f is jjiPR* computable uniformly on NStdAlg{E, E); 

(a) f is strongly specifiable uniformly on NStdAlg{E, E), with hidden sorts and func- 
tions, by a finite set of conditional equations which (together with E) is conservative 
over E in CondEq(Z'), and such that the signature of these equations is also strictly 
N-standard. 

Remark (Herbrand-Godel computability on N). The above theorem generahses the 
classical equivalence result on J\f [Kle52]. 

10 Concluding remarks and future directions 

10.1 Computation on Topological Data Types 

We have extended the theory of algebraic specifications from the world of countable com- 
putable algebras to that of all algebras, and especially metric algebras, by means of abstract 
computability theory. Topological data types and algebraic specifications play a funda- 
mental role in many areas of computing, including semantics and scientific computation. 

Our main theorems concern the transformation of abstract algorithms to algebraic spec- 
ifications and provide some basic techniques for the theory of specifying and verifying 
abstract computations. An obvious question is: 

Under what circumstances can the conditional equations be replaced by equa- 
tions in our theory? 

However, the converse results on the derivation of algorithms from algebraic specifi- 
cations need strengthening to provide completeness or equivalence theorems. Improving 
results in the reverse direction is an important problem, as stated in the Introduction. 
There is much more to this topic than the results in Section 9. A key technical problem 
in this area is: 

To develop general techniques for solving equations, conditional equations and 
other algebraic formulae in topological algebras. 

In semantics, for example, special cases of the problem are common. Semantic modelling 
makes heavy use of fixed-point equations. One thinks of the introduction of metric methods 
into semantics by M. Nivat (see [Niv79, AN80a, AN80b]), or their use in concurrency 
theory by De Bakker and others [dBZ82, dBR92, dBdV99]. Studies of the methods of 
equation solving in ultrametric algebras, including equivalence between metric, algebraic 
and domain-theoretic techniques, are in Stoltenberg-Hansen and Tucker [SHT88, SHT91, 
SHT93]; see also [SHLG94]. 

In scientific computation, numerical methods are concerned with obtaining computable 
solutions from differential and integral equations. Mathematical models of systems in the 
world are specified by sets of equations, from which algorithms are sought to compute their 
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solutions and hence to simulate the system. Our main theorems and examples in Section 5 
show the opposite: if a system can be approximately simulated on a computer then there 
exist algebraic specifications that capture the system's behaviour. Such results seem to 
be new and, in our view, draw loci that help delimit the computability theory of physical 
systems. We conjecture that it is possible 

To show that certain parts of the theory of numerical approximation of differential and 
integral equations are special instances of a general theory of algebraic specifications. 

This is an exciting and difficult problem with many obvious applications. 

Given the wealth of algorithms and theory in numerical methods, it seems to us that 
relatively little is known about the computational and logical scope and limits of equa- 
tions, the classical mathematical methods of science. Progress in the area has awaited the 
creation of stable computation theories for topological data types. Over the past decade, 
computability theory for topological spaces and algebras has developed dramatically. Sev- 
eral general approaches have produced deep results and have been shown to be equivalent. 
Some approaches are 

• metric spaces [Mos64], 

• axiomatic computation structures [PER89], 

• type two cffcctivity [WeiOO], 

• algebraic domain representability [SHT88, SHT95, Bla97], 

• continuous domain representability [Eda97], 

• abstract computability [TZ99, TZOO, BSS89] 

The equivalence of the first five approaches is proved in [SHT99]. The equivalence of 
aU these with the last one is proved in [Bra97, Bra99, TZ99, TZOla]. 

However, this computability theory needs to be complemented by a logical theory which 
includes equation solving in topological algebras. 

10.2 Theory of computable data types 

The theory of algebraic specifications of computable (semicomputable, and cosemicom- 
putable) data types contains many techniques for proving special properties of algebraic 
specifications, and showing the equivalence or non-equivalence of specification methods. 
Can some of these results be generalised? We believe the answer is yes, but not without 
much further work. Many results depend on special techniques of classical computability 
theory on the natural numbers. The theory for computable algebras uses representations 
by recursive algebras of numbers. It is possible to make a representation theory for topo- 
logical algebras based on Baire space using the type two effectivity methods of Klaus 
Weihrauch [WeiOO]. The use of the Diophantine Theorem for r.e. sets is more difficult: 
the theory of r.e. sets in abstract computability differs from the classical case, and no 
Diophantine Theorem is known (even for minimal algebras). 

Since abstract computability theory is imiform over classes of algebras, our results on 
specifications are uniform, yielding parameterised specifications. As we have seen, this pro- 
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cess is surprisingly delicate because it leads to questions about standardness. In abstract 
computations it is natural to augment an algebra by basic data types such as booleans, 
naturals and finite arrays. These have an effect on the axiomatisations. There are other 
important additional types, of both theoretical and practical interest, that may be used 
to augment a given data type and are in need of a standard algebraic specification theory, 
including: 

(i) infinite streams (necessary for developing the theory of interactive systems); 

(ii) real numbers (necessary for developing the theory of metric algebras and normed 
linear spaces). 

An attempt to extend the specification methods of this paper to both these data types, 
using infinitary equational specifications, is made in [TZOlb] 

Finally, we note there are several other basic properties of specifications in need of 
investigation, especially term rewriting properties. 
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